CVE-2007-2072

CVE-2007-2072 affects Ivan Gallery Script 0.1. The vulnerability is a PHP remote file inclusion in index.php via the dir parameter, allowing a remote attacker to execute arbitrary PHP code. The issue is tied to how dir is used in the script; some sources dispute the claim, contending the dir vari...