CVE-2007-2426

The myGallery plugin for WordPress (version 1.4b4 and earlier) contains a Remote File Inclusion (RFI) vulnerability in the myfunctions/mygallerybrowser.php script. The root cause is a failure to sanitize the myPath parameter, which allows unauthenticated remote attackers to include and execute ar...