Meganoide's news 1.1.1 - Remote File Inclusion via _SERVER[DOCUMENT_ROOT] Parameter
PHP remote file inclusion vulnerability in include.php in Meganoide's news 1.1.1 allows remote attackers to execute arbitrary PHP code via a URL in the _SERVER[DOCUMENT_ROOT] parameter.