PHP remote file inclusion vulnerability in last_gallery.php in YaPiG 0.93u and 0.94u allows remote attackers to execute arbitrary PHP code via the YAPIG_PATH parameter.
https://euvd.enisa.europa.eu/vulnerability/EUVD-2005-1884
http://secwatch.org/advisories/secwatch/20050530_yapig.txt