planetGallery allows remote attackers to gain administrator privileges via a direct request to admin/gallery_admin.php.
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-2117
http://www.securityfocus.com/bid/17753
http://www.securityfocus.com/archive/1/432576/100/0/threaded
http://www.planetc.de/download/planetgallery/planetgallery.html