LRMS PHP version 1.0 suffers from remote shell upload and multiple remote SQL injection vulnerabilities.