Live Membership Management System version 1.0 suffers from a remote PHP code injection vulnerability.