Membership Management System version 1.0 suffers from remote shell upload and remote SQL injection vulnerabilities.