CVE-2007-1164: Multiple PHP remote file inclusion vulnerabilities in DBImageGallery 1.2.2 allow remote attackers to execut...

Security readout for executives and security teams

DBImageGallery 1.2.2 has multiple remote file inclusion flaws. If the application is reachable, an attacker may be able to make affected PHP files load attacker-controlled PHP code. This can become server-side code execution. The source bundle does not provide a CVSS score, vendor fix, or evidence of active exploitation. Exposure is limited to environments still running DBImageGallery 1.2.2, especially internet-facing PHP deployments where the listed admin/ or includes/ scripts are reachable. The bundle does not identify broader affected products or maintained forks. Treat as urgent only if DBImageGallery 1.2.2 exists in your environment. The impact is serious because successful exploitation can run PHP code on the server, but exposure is likely narrow and tied to an old application. Mitigation focus: Inventory systems for DBImageGallery 1.2.2 installations.; Remove or disable DBImageGallery if it is no longer required.; Check project or vendor guidance for any fixed release or official workaround..

Prepared

Jun 29, 2026, 07:07 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.