This vulnerability does not exist. Even with register_globals on, $dir and $qadir are overridden by a static variable within the script itself.
Mail converted by mhonarc 2.6.15
This archive provided courtesy of JSW4.NET, Internet Hosting Services for Small Business.