In the Script Xoops-2.0.16 are Remote File Inclusion Bugs =0D
=0D
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++=0D
Script          : xoops-2.0.16-Kararli=0D
Discovered By   : F10=0D
Contact : by_f10@hotmail.com=0D 
WebSite : http://by-f10.com=0D 
Greetz          : by_emR3 , H0tturk , TaRanTuLa ,       =0D
                  gsy , ercu_145 ,               =0D
                  LupuS,m0sted,CyberGhost ... . =0D
>From            : Turkey=0D
Description     : In the Script Xoops-2.0.16 are  =0D
                  Remote File Inclusion Bugs.=0D
                  I show the bugs, in which file  =0D
                  are their.=0D
                  "xoops-2.0.16-Kararli/" << is  =0D
                   the script path..=0D
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++=0D
=0D
-------------------------------------=0D
bugs:=0D
=0D
xoops-2.0.16-Kararli/htdocs/notifications.php         include_once $lookup_file;=0D
xoops-2.0.16-Kararli/htdocs/extras/login.php        include $path.'/mainfile.php';=0D
xoops-2.0.16-Kararli/htdocs/include/functions.php        require_once $hnd_file;=0D
xoops-2.0.16-Kararli/htdocs/include/functions.php        include_once $hnd_file;=0D
xoops-2.0.16-Kararli/htdocs/kernel/notification.php        include_once $tags_file;=0D
xoops-2.0.16-Kararli/htdocs/kernel/notification.php        include_once $lookup_file;=0D
xoops-2.0.16-Kararli/htdocs/class/auth/authfactory.php        require_once $file;=0D
xoops-2.0.16-Kararli/htdocs/class/database/databasefactory.php        require_once $file;=0D
xoops-2.0.16-Kararli/htdocs/class/database/databasefactory.php        require_once $file;=0D
xoops-2.0.16-Kararli/htdocs/class/smarty/Smarty.class.php        $_smarty_results ==0D
smarty_core_process_compiled_include($_params, $this);=0D
xoops-2.0.16-Kararli/htdocs/class/smarty/Smarty.class.php        include($_smarty_compile_path);=0D
xoops-2.0.16-Kararli/htdocs/class/smarty/Smarty.class.php        include($_smarty_compile_path);=0D
xoops-2.0.16-Kararli/htdocs/class/smarty/Smarty.class.php        require_once($this->_get_plugin_filepath('function',=0D
'config_load'));=0D
xoops-2.0.16-Kararli/htdocs/class/smarty/Smarty.class.php        require_once($this->compiler_file);=0D
xoops-2.0.16-Kararli/htdocs/class/smarty/Smarty.class.php        function=0D
_smarty_include($params)=0D
xoops-2.0.16-Kararli/htdocs/class/smarty/Smarty.class.php        include($_smarty_compile_path);=0D
xoops-2.0.16-Kararli/htdocs/class/smarty/Smarty.class.php        function=0D
_include($filename, $once=false, $params=null)=0D
xoops-2.0.16-Kararli/htdocs/class/smarty/Smarty.class.php        return=0D
include_once($filename);=0D
xoops-2.0.16-Kararli/htdocs/class/smarty/Smarty.class.php        return include($filename);=0D
xoops-2.0.16-Kararli/htdocs/class/smarty/Smarty_Compiler.class.php        include_once=0D
$plugin_file;=0D
xoops-2.0.16-Kararli/htdocs/class/smarty/Smarty_Compiler.class.php        include_once=0D
$plugin_file;=0D
xoops-2.0.16-Kararli/htdocs/class/smarty/Smarty_Compiler.class.php        include_once=0D
$plugin_file;=0D
xoops-2.0.16-Kararli/htdocs/class/smarty/Smarty_Compiler.class.php        $output .==0D
"\$this->_smarty_include($_params);\n" .=0D
xoops-2.0.16-Kararli/htdocs/modules/system/admin.php        include=0D
$admin_dir.'/'.$file.'/xoops_version.php';=0D
xoops-2.0.16-Kararli/htdocs/class/mail/phpmailer/class.phpmailer.php        include_once($this->PluginDir=0D
. "class.smtp.php");=0D
xoops-2.0.16-Kararli/htdocs/class/mail/phpmailer/class.phpmailer.php        include($lang_path.'phpmailer.lang-'.$lang_type.'.php');=0D
xoops-2.0.16-Kararli/htdocs/class/mail/phpmailer/class.phpmailer.php        include($lang_path.'phpmailer.lang-en.php');=0D
xoops-2.0.16-Kararli/htdocs/class/smarty/internals/core.display_debug_console.php        $smarty->_include($_compile_path);=0D
xoops-2.0.16-Kararli/htdocs/class/smarty/internals/core.load_plugins.php        include_once=0D
$_plugin_file;=0D
xoops-2.0.16-Kararli/htdocs/class/smarty/internals/core.load_resource_plugin.php        include_once($_plugin_file);=0D
xoops-2.0.16-Kararli/htdocs/class/smarty/internals/core.process_cached_inserts.php        $smarty->_include($php_resource,=0D
true);=0D
xoops-2.0.16-Kararli/htdocs/class/smarty/internals/core.process_compiled_include.php        function=0D
smarty_core_process_compiled_include($params, &$smarty)=0D
xoops-2.0.16-Kararli/htdocs/class/smarty/internals/core.process_compiled_include.php        $smarty->_include($_include_file_path,=0D
true);=0D
xoops-2.0.16-Kararli/htdocs/class/smarty/internals/core.run_insert_handler.php        $smarty->_include($_params['php_resource'],=0D
true);=0D
xoops-2.0.16-Kararli/htdocs/class/smarty/internals/core.smarty_include_php.php        $smarty->_include($_smarty_php_resource,=0D
$params['smarty_once'], $params['smarty_include_vars']);=0D
xoops-2.0.16-Kararli/htdocs/class/smarty/internals/core.smarty_include_php.php        $smarty->_include($_smarty_php_resource,=0D
$params['smarty_once'], $params['smarty_include_vars']);=0D
xoops-2.0.16-Kararli/htdocs/class/smarty/internals/core.write_compiled_include.php        function=0D
smarty_core_write_compiled_include($params, &$smarty)=0D
xoops-2.0.16-Kararli/htdocs/class/smarty/plugins/function.config_load.php        include($_compile_file);=0D
xoops-2.0.16-Kararli/htdocs/class/smarty/plugins/function.html_checkboxes.php        require_once=0D
$smarty->_get_plugin_filepath('shared','escape_special_chars');=0D
xoops-2.0.16-Kararli/htdocs/class/smarty/plugins/function.html_image.php        require_once=0D
$smarty->_get_plugin_filepath('shared','escape_special_chars');=0D
xoops-2.0.16-Kararli/htdocs/class/smarty/plugins/function.html_options.php        require_once=0D
$smarty->_get_plugin_filepath('shared','escape_special_chars');=0D
xoops-2.0.16-Kararli/htdocs/class/smarty/plugins/function.html_radios.php        require_once=0D
$smarty->_get_plugin_filepath('shared','escape_special_chars');=0D
xoops-2.0.16-Kararli/htdocs/class/smarty/plugins/function.html_select_date.php        require_once=0D
$smarty->_get_plugin_filepath('shared','make_timestamp');=0D
xoops-2.0.16-Kararli/htdocs/class/smarty/plugins/function.html_select_date.php        require_once=0D
$smarty->_get_plugin_filepath('function','html_options');=0D
xoops-2.0.16-Kararli/htdocs/class/smarty/plugins/function.html_select_time.php        require_once=0D
$smarty->_get_plugin_filepath('shared','make_timestamp');=0D
xoops-2.0.16-Kararli/htdocs/class/smarty/plugins/function.html_select_time.php        require_once=0D
$smarty->_get_plugin_filepath('function','html_options');=0D
xoops-2.0.16-Kararli/htdocs/class/smarty/plugins/modifier.date_format.php        require_once=0D
$smarty->_get_plugin_filepath('shared','make_timestamp');=0D
xoops-2.0.16-Kararli/htdocs/class/smarty/xoops_plugins/compiler.includeq.php        $output=0D
.= "\$this->_smarty_include($_params);\n";=0D
xoops-2.0.16-Kararli/htdocs/modules/xplorer/admin/admin_header.php        include_once($admin_lang_file);=0D
=0D