CVE-2005-2198

SPiD (a PHP-based photo gallery) is affected by CVE-2005-2198 due to a remote file inclusion vulnerability in lang.php. The flaw allows an attacker to influence the lang_path parameter to include PHP code from an attacker-controlled location, enabling arbitrary code execution and potential disclo...