$ 0 0 phpBazar versions 2.1.0 and below suffer from remote file inclusion and credential access flaws.