CVE-2006-3210

Ralf Image Gallery (RIG) 0.7.4 and earlier than 1.0 is affected when register_globals is enabled. The vulnerability allows PHP remote file inclusion and directory traversal via dir_abs_src (in check_entry.php, admin_album.php, admin_image.php, admin_util.php) and dir_abs_admin_src (in admin_album...

CVE-2007-4127

CVE-2007-4127 affects Ralf Image Gallery (RIG) 1.0, where PHP remote file inclusion is possible via dir_abs_src in check_entry.php. Notes mention that exploitation may be blocked if register_globals is enabled, and CVE-2006-3210 covers earlier versions where register_globals enables RFI/Directory...