There has been a change to the solution.
!solution
Change line 48 so that the include statement stops null input and incorrect input:
if($page == NULL)
echo("Get lost! Stop Trying to get path disclosure!");
else
{
if(!file_exists($page.'.css'))
{
echo("Get lost! Stop Trying to get path disclosure!");
}
else
{
include($page.'.css');
}
}
The vendor has not yet been notified.
============================================================
!author
Xia Shing Zee
============================================================
