CVE-2007-4127

PHP remote file inclusion vulnerability in checkentry.php in Ralf Image Gallery RIG, aka Raphael Moll RIG Image Gallery, 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the dirabssrc parameter. NOTE: this issue is disputed by multiple third parties, who report that the...

CVE-2007-4127

CVE-2007-4127 affects Ralf Image Gallery (RIG) 1.0, where PHP remote file inclusion is possible via dir_abs_src in check_entry.php. Notes mention that exploitation may be blocked if register_globals is enabled, and CVE-2006-3210 covers earlier versions where register_globals enables RFI/Directory...