PHP remote file inclusion vulnerability in social_game_play.php in Social Site Generator (SSG) 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the path parameter.
https://www.exploit-db.com/exploits/5707
https://exchange.xforce.ibmcloud.com/vulnerabilities/42780
http://www.securityfocus.com/bid/29462