rig-rfi.txt

------------------------------------------------------------------------------------------------------------------- MEFISTO PreSents... Script: RIG Image Gallery Script Download: http://sourceforge.net/project/showfiles.php?groupid=54367 Contact: ilker Kandemir Code:...

RIG Image Gallery (dir_abs_src) Remote File Include Vulnerability

------------------------------------------------------------------------------------------------------------------- MEFISTO PreSents... Script: RIG Image Gallery Script Download: http://sourceforge.net/project/showfiles.php?groupid=54367 Contact: ilker Kandemir ilkerkandemiratmynet.com Code:...

CVE-2006-3210

Ralf Image Gallery (RIG) 0.7.4 and earlier than 1.0 is affected when register_globals is enabled. The vulnerability allows PHP remote file inclusion and directory traversal via dir_abs_src (in check_entry.php, admin_album.php, admin_image.php, admin_util.php) and dir_abs_admin_src (in admin_album...

CVE-2006-3210: Improper Control of Generation of Code

Ralf Image Gallery RIG 0.7.4 and other versions before 1.0, when registerglobals is enabled, allows remote attackers to conduct PHP remote file inclusion and directory traversal attacks via URLs or ".." sequences in the 1 dirabssrc parameter in a checkentry.php, b adminalbum.php, c adminimage.php...