Le Ralf Ralf Image Gallery vulnerabilities
2 known vulnerabilities affecting le_ralf/ralf_image_gallery.
Total CVEs
2
CISA KEV
0
Public exploits
2
Exploited in wild
0
Severity breakdown
MEDIUM2
Vulnerabilities
Page 1 of 1
CVE-2006-3210P4MEDIUMCVSS 5.1PoCv0.6.5v0.7+5 more2006-06-24
CVE-2006-3210 [MEDIUM] CWE-94 CVE-2006-3210: Ralf Image Gallery (RIG) 0.7.4 and other versions before 1.0, when register_globals is enabled, allo
Ralf Image Gallery (RIG) 0.7.4 and other versions before 1.0, when register_globals is enabled, allows remote attackers to conduct PHP remote file inclusion and directory traversal attacks via URLs or ".." sequences in the (1) dir_abs_src parameter in (a) check_entry.php, (b) admin_album.php, (c) admin_image.php, and (d) admin_util.php; and the (2) dir
nvd
CVE-2007-4127P3MEDIUMCVSS 6.8PoCv1.02007-08-01
CVE-2007-4127 [MEDIUM] CVE-2007-4127: PHP remote file inclusion vulnerability in check_entry.php in Ralf Image Gallery (RIG), aka Raphael
PHP remote file inclusion vulnerability in check_entry.php in Ralf Image Gallery (RIG), aka Raphael Moll RIG Image Gallery, 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the dir_abs_src parameter. NOTE: this issue is disputed by multiple third parties, who report that the product exits if register_globals is enabled, thereby blocking e
nvd