CVE-2007-2426

The vulnerability CVE-2007-2426 affects the MyGallery WordPress plugin (versions 1.4b4 and earlier) where mygallerybrowser.php does not sanitize the myPath parameter, enabling PHP remote file inclusion. An attacker can supply a URL to cause the server to include and execute arbitrary PHP code, po...