this isnt a Vuln. because in admin/linklists.admin.php line 6, $pathtoscript = "../"; veriable is defined:) xoron