Gnew version 2013.1 suffers from file inclusion and remote SQL injection vulnerabilities…. Gnew version 2013.1 suffers from file inclusion and remote SQL injection vulnerabilities.

Read more http://packetstormsecurity.com/files/123482/gnew-lfisql.txt