There is a file inclusion vulnerability in the template management module in UCMS 1.6
CWE-552, CWE-552