http://www.exploit-db.com/exploits/33514/ scriptte açık var