HeffnerCMS Remote Command Exucetion And Cross Scripting Attack

Website : http://www.christian-heffner.de Version : 1.07 I. ?php $filename="index.php"; requireonce 'vlib/vlibTemplate.php'; $tmpl = new vlibTemplate'tmpl/std/index.tpl'; requireonce 'config/dbconfig.php'; requireonce 'config/pcfunctions.php'; Ucuyor.... : lol II. Vulnerable code ;...