PT-2007-5329 · Rig · Ralf Image Gallery

Published 2007-08-01 · Updated 2024-08-07 · CVE-2007-4127

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Ralf Image Gallery (RIG) version 1.0

Description A remote file inclusion issue exists, allowing remote attackers to execute arbitrary PHP code via a URL in the dir abs src parameter in the check entry.php file. However, it is reported that the product exits if register globals is enabled, potentially blocking exploitation.

Recommendations For Ralf Image Gallery (RIG) version 1.0, consider disabling the check entry.php file or restricting access to it until a fix is available. Additionally, ensure that register globals is disabled to prevent potential exploitation.

Exploit

Fix

Related Identifiers

CVE-2007-4127

Affected Products

Ralf Image Gallery

References · 11

• 🔥 http://attrition.org/pipermail/vim/2007-July/001743.html · Exploit
• 🔥 https://exploit-db.com/exploits/1942 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-4127 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35689 · Note
• http://securityfocus.com/archive/1/475094/100/0/threaded · Note
• https://t.me/cvenotify/89691 · Telegram Post
• http://attrition.org/pipermail/vim/2007-July/001748.html · Note
• http://attrition.org/pipermail/vim/2007-July/001747.html · Note
• http://securityreason.com/securityalert/2938 · Note
• http://attrition.org/pipermail/vim/2007-July/001749.html · Note
• http://osvdb.org/46973 · Note