Researcher: BeyazKurt
Ref: milw0rm 3867
http://www.milw0rm.com/exploits/3867
theme/acgv.php contains:
include("config/config.inc.php");
include("config/function.inc.php");
...
<td align="center"><? include("templates/$rubrik".".html"); ?></td>
config.inc.php and function.inc.php do not define $rubrik.
- Steve