CVE-2004-1984

published 2004-05-02

CVE-2004-1984: Coppermine Photo Gallery 1.2.2b and 1.2.0 RC4 allows remote attackers to obtain sensitive information via a direct HTTP request to (1) phpinfo.php, (2)…

Priority P4 10 medium 5 CVSS 2.0

AV N AC L Au N C P I N A N

Coppermine Photo Gallery 1.2.2b and 1.2.0 RC4 allows remote attackers to obtain sensitive information via a direct HTTP request to (1) phpinfo.php, (2) addpic.php, (3) config.php, (4) db_input.php, (5) displayecard.php, (6) ecard.php, (7) crop.inc.php, which reveal the full path in a PHP error message.

Affected

11 ranges

Vendor	Product	Version range	Fixed in
coppermine	coppermine_photo_gallery	—	—
coppermine	coppermine_photo_gallery	—	—
coppermine	coppermine_photo_gallery	—	—
coppermine	coppermine_photo_gallery	—	—
coppermine	coppermine_photo_gallery	—	—
coppermine	coppermine_photo_gallery	—	—
francisco_burzi	php-nuke	—	—
francisco_burzi	php-nuke	—	—
francisco_burzi	php-nuke	—	—
francisco_burzi	php-nuke	—	—
francisco_burzi	php-nuke	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.