What is RFI?

RFI stands for Remote File Inclusion. It's a type of vulnerability that allows an attacker to include a remote file, usually a script, into a vulnerable application. This can lead to arbitrary code execution on the server, potentially giving the attacker complete control. It occurs when an application uses user-supplied input to dynamically include files without proper sanitization.