PHP remote file inclusion vulnerability in customize.php for phpMyNewsletter 0.6.10 allows remote attackers to execute arbitrary PHP code via the l parameter.Referenceshttp://www.securityfocus.com/bid/5886http://archives.neohapsis.com/archives/bugtraq/2002-10/0060.htmlhttp://secunia.com/advisories/7220http://www.iss.net/security_center/static/10288.php