CVE-2007-2019: Tomex Phpgalleryscript

High severity, CVSS 7.5. EPSS: 3.2% chance of exploitation in the next 30 days.

PHP remote file inclusion vulnerability in init.gallery.php in phpGalleryScript 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the include_class parameter.

Affected products

• Tomex Phpgalleryscript: version 1.0 only

Published 2007-04-12. Last modified 2026-06-16.