PHP remote file inclusion vulnerability in usercp_menu.php in AR Memberscript allows remote attackers to execute arbitrary PHP code via a URL in the script_folder parameter.Referenceshttps://exchange.xforce.ibmcloud.com/vulnerabilities/30891https://www.exploit-db.com/exploits/2931
