PHP remote file inclusion vulnerabilities in include/footer.inc.php in (1) AllMyVisitors (2) AllMyLinks and (3) AllMyGuests allow remote attackers to execute arbitrary PHP code via a URL in the _AMVconfigcfg_serverpath parameter.