Raffle Draw System v1.0 was discovered to contain a local file inclusion vulnerability via the page parameter in index.php.