Vulnerability in Coppermine-Gallery Coppermine Photo Gallery

CVE-2008-7186

Coppermine Photo Gallery (CPG) 1.4.14 does not restrict access to update.php, which allows remote attackers to obtain sensitive information such as the database table prefix via a direct request. NOTE: this might be leveraged for attacks against CVE-2008-0504.

EPSS: 0.013 (68.4th percentile) — read the EPSS interpretation.

Affected products

Coppermine-gallery Coppermine_photo_gallery — versions 1.4.14
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

cve@mitre.org (Exploit, x_refsource_MISC)
cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
cve@mitre.org (Patch, vdb-entry, x_refsource_VUPEN, Vendor Advisory)