CVE-2007-4127: Undefined Security Weakness

PHP remote file inclusion vulnerability in checkentry.php in Ralf Image Gallery RIG, aka Raphael Moll RIG Image Gallery, 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the dirabssrc parameter. NOTE: this issue is disputed by multiple third parties, who report that the...

rig-rfi.txt

------------------------------------------------------------------------------------------------------------------- MEFISTO PreSents... Script: RIG Image Gallery Script Download: http://sourceforge.net/project/showfiles.php?groupid=54367 Contact: ilker Kandemir Code:...

CVE-2006-3210: Improper Control of Generation of Code

Ralf Image Gallery RIG 0.7.4 and other versions before 1.0, when registerglobals is enabled, allows remote attackers to conduct PHP remote file inclusion and directory traversal attacks via URLs or ".." sequences in the 1 dirabssrc parameter in a checkentry.php, b adminalbum.php, c adminimage.php...