PHP remote file inclusion vulnerability in inc/functions.inc.php in PPA web photo gallery 0.5.6 allows remote attackers to execute arbitrary code via the config[ppa_root_path] variable.
https://euvd.enisa.europa.eu/vulnerability/EUVD-2005-2200
http://www.securityfocus.com/bid/14209