CVE

Id
27484  
CVE No.
CVE-2007-4127  
Status
Candidate  
Description
** DISPUTED ** PHP remote file inclusion vulnerability in check_entry.php in Ralf Image Gallery (RIG), aka Raphael Moll RIG Image Gallery, 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the dir_abs_src parameter. NOTE: this issue is disputed by multiple third parties, who report that the product exits if register_globals is enabled, thereby blocking exploitation. NOTE: CVE-2006-3210.a covers this issue in versions before 1.0.  
Phase
Assigned (20070801)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
282679 27484 CVE-2007-4127 BUGTRAQ:20070730 RIG Image Gallery (dir_abs_src) Remote File Include Vulnerability  View
282680 27484 CVE-2007-4127 URL:http://www.securityfocus.com/archive/1/archive/1/475094/100/0/threaded  View
282681 27484 CVE-2007-4127 VIM:20070731 WTF: RIG Image Gallery (dir_abs_src) Remote File Include Vulnerability  View
282682 27484 CVE-2007-4127 URL:http://www.attrition.org/pipermail/vim/2007-July/001743.html  View
282683 27484 CVE-2007-4127 VIM:20070731 WTF: RIG Image Gallery (dir_abs_src) Remote File Include Vulnerability  View
282684 27484 CVE-2007-4127 URL:http://www.attrition.org/pipermail/vim/2007-July/001747.html  View
282685 27484 CVE-2007-4127 VIM:20070731 WTF: RIG Image Gallery (dir_abs_src) Remote File Include Vulnerability  View
282686 27484 CVE-2007-4127 URL:http://www.attrition.org/pipermail/vim/2007-July/001749.html  View
282687 27484 CVE-2007-4127 VIM:20070731 WTF: RIG Image Gallery (dir_abs_src) Remote File Include Vulnerability  View
282688 27484 CVE-2007-4127 URL:http://www.attrition.org/pipermail/vim/2007-July/001748.html  View
282689 27484 CVE-2007-4127 OSVDB:46973  View
282690 27484 CVE-2007-4127 URL:http://osvdb.org/46973  View
282691 27484 CVE-2007-4127 SREASON:2938  View
282692 27484 CVE-2007-4127 URL:http://securityreason.com/securityalert/2938  View
282693 27484 CVE-2007-4127 XF:rig-checkentry-file-include(35689)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
52137 JVNDB-2007-000800 CoolKey におけるシンボリックリンク攻撃を受ける脆弱性 CoolKey には、/tmp/.pk11ipc1/ ディレクトリの一時ファイルにシンボリックリンク攻撃を受ける脆弱性が存在します。 CVE-2007-4129 27484 3.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000800.html  View