CVE-2006-3210

Ralf Image Gallery (RIG) 0.7.4 and earlier than 1.0 is affected when register_globals is enabled. The vulnerability allows PHP remote file inclusion and directory traversal via dir_abs_src (in check_entry.php, admin_album.php, admin_image.php, admin_util.php) and dir_abs_admin_src (in admin_album...