CVE-2007-2072

PHP remote file inclusion vulnerability in index.php in Ivan Gallery Script 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the dir…

published April 18, 2007

CVSS
—
EPSS
2%
Percentile
76.6
In the wild
Unconfirmed
What it is

PHP remote file inclusion vulnerability in index.php in Ivan Gallery Script 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the dir parameter. NOTE: this issue has been disputed by third party researchers for 0.3, stating that the dir variable is properly initialized before use

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01682 · 76.6th percentile
Published
2007-04-18T02:20Z
EPSS history
Timeline
  • 18 APR 02:20Z
    PHP remote file inclusion vulnerability in index.php in Ivan Gallery Script 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the dir…
    cvelistv5