TI-2010-01666 CVE-2010-1737 · GHSA-g492-pgpg-hrw6PHP remote file inclusion vulnerability in core/includes/gfw_smarty.php in Gallo 0.1.0…Priority LOW 34PHP remote file inclusion vulnerability in core/includes/gfw_smarty.php in Gallo 0.1.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary PHP code via a URL in the config[gfwroot] parameter.CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.01967 · Published 2010-05-06 · No fix listed CWE-94