CVE-2007-4127

PHP remote file inclusion vulnerability in check_entry.php in Ralf Image Gallery (RIG), aka Raphael Moll RIG Image Gallery, 1.0 allows remote attackers to…

published August 1, 2007

CVSS
—
EPSS
3%
Percentile
87.2
In the wild
Unconfirmed
What it is

PHP remote file inclusion vulnerability in check_entry.php in Ralf Image Gallery (RIG), aka Raphael Moll RIG Image Gallery, 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the dir_abs_src parameter. NOTE: this issue is disputed by multiple third parties, who report that the product exits if register_globals is enabled, thereby blocking exploitation. NOTE: CVE-2006-3210.a covers this issue in versions before 1.0

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03011 · 87.2th percentile
Published
2007-08-01T16:00Z
EPSS history
Timeline
  • 01 AUG 16:00Z
    PHP remote file inclusion vulnerability in check_entry.php in Ralf Image Gallery (RIG), aka Raphael Moll RIG Image Gallery, 1.0 allows remote attackers to…
    cvelistv5