PHP remote file inclusion vulnerability in gallery/displayCategory.php in the My_eGallery 2.5.6 module in myPHPNuke (MPN) allows remote attackers to execute arbitrary PHP code via a URL in the basepath parameter.
https://www.exploit-db.com/exploits/3010
https://exchange.xforce.ibmcloud.com/vulnerabilities/31136
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-6778