Ralf Image Gallery versions 0.7.4 and below suffer from multiple cross site scripting, remote file inclusion, and directory traversal vulnerabilities.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/47738/major_rls18.txt
Source: https://packetstormsecurity.com/files/47738/major_rls18.txt.html