Bypassing extension check

[ayu]

I just remembered I asked about .shtml here but now I came up with a new question. What do you think of SSI (server side include). on google I found many think its a rare vuln but by talking to some people they said they encountered it many times so what do u think about it?

hmm well I have never encountered it as a vulnerability during a job, since it's usually not enabled by default.