The contact.php code from Mail-it Now! version 1.5 is susceptible to a remote code execution flaw. Exploit included.