CVE-2007-2706

CVE-2007-2706 affects Geeklog’s Media Gallery (version 1.4.8a and earlier). The vulnerability is a PHP remote file inclusion in maint/ftpmedia.php that allows an attacker to execute arbitrary PHP code through a URL in the _MG_CONF[path_html] parameter. Root cause is a remote file inclusion flaw i...