HomePH Design version 2.10 RC2 suffers from local file inclusion and remote file inclusion vulnerabilities.