CVE-2007-2068: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in the StoreFront mods for Gallery allow remote attackers to execute arbitrary PHP code via a URL in the GALLERYBASEDIR parameter to 1 mods/businessfunctions.php or 2 mods/uifunctions.php...