Unscored severity · published Jun 24, 2006
CVE-2006-3210
Ralf Image Gallery (RIG) 0.7.4 and other versions before 1.0, when register_globals is enabled, allows remote attackers to conduct PHP remote file inclusion and directory…
–
CVSS
13.5%
EPSS
No
On KEV
Description
Ralf Image Gallery (RIG) 0.7.4 and other versions before 1.0, when register_globals is enabled, allows remote attackers to conduct PHP remote file inclusion and directory traversal attacks via URLs or ".." sequences in the (1) dir_abs_src parameter in (a) check_entry.php, (b) admin_album.php, (c) admin_image.php, and (d) admin_util.php; and the (2) dir_abs_admin_src parameter in admin_album.php and admin_image.php. NOTE: this issue can be leveraged to conduct cross-site scripting (XSS) attacks.
Exploitation
Is it being used?
Exploit prediction (EPSS)13.5% · higher than 96% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RI
Ralf Image Gallery · LE Ralf
0.6.5; 0.7; 0.7.1; 0.7.2; 0.7.3; 0.7.4; +1 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-3210
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-3210
rig.powerpulsar.com
http://rig.powerpulsar.com/#news
Patch
http://secunia.com/advisories/20771
securityreason.com
http://securityreason.com/securityalert/1136
www.majorsecurity.de
http://www.majorsecurity.de/advisory/major_rls18.txt
www.osvdb.org
http://www.osvdb.org/26753
www.osvdb.org
http://www.osvdb.org/26754
More from Ralf Image Gallery
–
CVE-2007-4127
PHP remote file inclusion vulnerability in check_entry.php in Ralf Image Gallery (RIG), aka Raphael Moll RIG Image Gallery, 1.0 allows remote attackers to execute arbitrary PHP…