PHP SETI@Home Web Monitor suffers from local file inclusion and remote file inclusion vulnerabilities.