CVE-2007-2706: Geeklog Media Gallery

High severity, CVSS 7.5. EPSS: 3.3% chance of exploitation in the next 30 days.

PHP remote file inclusion vulnerability in maint/ftpmedia.php in Media Gallery 1.4.8a and earlier for Geeklog allows remote attackers to execute arbitrary PHP code via a URL in the _MG_CONF[path_html] parameter.

Affected products

• Geeklog Media Gallery: up to and including 1.4.8a

Published 2007-05-16. Last modified 2026-06-16.