blueshoes 4.6_public and prior suffers from a remote file inclusion vulnerability in GoogleSearch.php.