New Article Mambo Component versions 1.0 and below suffer from remote file inclusion vulnerabilities.