CVE-2005-3979: relocate_server.php in Coppermine Photo Gallery (CPG) 1.4.2 and 1.4 beta is not removed after installation and does not use authentication, which allows remote…

PriorityP416medium5CVSS 2.0

AVNACLAuNCPINAN

EPSS

1.55%

72.1th percentile

relocate_server.php in Coppermine Photo Gallery (CPG) 1.4.2 and 1.4 beta is not removed after installation and does not use authentication, which allows remote attackers to obtain sensitive information, such as database configuration, via a direct request.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
coppermine-gallery	coppermine_photo_gallery	—	—
coppermine-gallery	coppermine_photo_gallery	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.