NVD

Id
56258  
Name
CVE-2007-4127  
Description
** DISPUTED ** PHP remote file inclusion vulnerability in check_entry.php in Ralf Image Gallery (RIG), aka Raphael Moll RIG Image Gallery, 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the dir_abs_src parameter. NOTE: this issue is disputed by multiple third parties, who report that the product exits if register_globals is enabled, thereby blocking exploitation. NOTE: CVE-2006-3210.a covers this issue in versions before 1.0.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-08-01  
Modified Date
2008-11-15  
Seq
2007-4127  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
286503 56258 CVE-2007-4127 2938  View
286504 56258 CVE-2007-4127 20070731 WTF: RIG Image Gallery (dir_abs_src) Remote File Include Vulnerability  View
286505 56258 CVE-2007-4127 20070731 WTF: RIG Image Gallery (dir_abs_src) Remote File Include Vulnerability  View
286506 56258 CVE-2007-4127 20070731 WTF: RIG Image Gallery (dir_abs_src) Remote File Include Vulnerability  View
286507 56258 CVE-2007-4127 20070731 WTF: RIG Image Gallery (dir_abs_src) Remote File Include Vulnerability  View
286508 56258 CVE-2007-4127 20070730 RIG Image Gallery (dir_abs_src) Remote File Include Vulnerability  View
286509 56258 CVE-2007-4127 rig-checkentry-file-include(35689)  View

Related JVN