CVE-2007-2072
** DISPUTED ** PHP remote file inclusion vulnerability in index.php in Ivan Gallery Script 0.1...
PHP remote file inclusion vulnerability in index.php in Ivan Gallery Script 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the dir parameter. NOTE: this issue has been disputed by third party researchers for 0.3, stating that the dir variable is properly initialized before use
Exploit likelihood
What each source reports
NVD Score used
PHP remote file inclusion vulnerability in index.php in Ivan Gallery Script 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the dir parameter. NOTE: this issue has been disputed by third party researchers for 0.3, stating that the dir variable is properly initialized before use
- Record
CVE-2007-2072- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
PHP remote file inclusion vulnerability in index.php in Ivan Gallery Script 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the dir parameter. NOTE: this issue has been disputed by third party researchers for 0.3, stating that the dir variable is properly initialized before use
- Record
CVE-2007-2072- Updated
- 2026-11-02
EUVDEUVD-2007-2067 No score
PHP remote file inclusion vulnerability in index.php in Ivan Gallery Script 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the dir parameter. NOTE: this issue has been disputed by third party researchers for 0.3, stating that the dir variable is properly initialized before use
- Record
EUVD-2007-2067- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-4qq3-m5jv-mjcc No score
** DISPUTED ** PHP remote file inclusion vulnerability in index.php in Ivan Gallery Script 0.1...
** DISPUTED ** PHP remote file inclusion vulnerability in index.php in Ivan Gallery Script 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the dir parameter. NOTE: this issue has been disputed by third party researchers for 0.3, stating that the dir variable is properly initialized before use.
- Record
GHSA-4qq3-m5jv-mjcc- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| aliases, references, title | GitHub Advisories | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-2072 is a high vulnerability (CVSS 7.5) in Ivan Gallery Script Gallery Script, published April 18, 2007. Its validity is disputed. EPSS puts the chance of exploitation in the next 30 days at 1.68%, the 77th percentile.