PHP remote file inclusion vulnerability in ains_main.php in Johannes Gijsbers (aka Taradino) Ad Fundum Integratable News Script (AINS) 0.02b allows remote attackers to execute arbitrary PHP code via a URL in the ains_path parameter.
https://www.exploit-db.com/exploits/3202
https://exchange.xforce.ibmcloud.com/vulnerabilities/31850