CVE-2007-1024
PHP remote file inclusion vulnerability in include.php in Meganoide’s news 1.1.1 allows remote attackers to execute arbitrary PHP code via a URL in the _SERVER[DOCUMENT_ROOT] parameter.
Date published : 2007-02-21
http://www.securityfocus.com/bid/22589
http://www.securityfocus.com/archive/1/460323/100/0/threaded