CVE-2008-7186
published 2009-09-09CVE-2008-7186: Coppermine Photo Gallery (CPG) 1.4.14 does not restrict access to update.php, which allows remote attackers to obtain sensitive information such as the…
PriorityP419medium5CVSS 2.0
AVNACLAuNCPINAN
EPSS
1.34%
67.7th percentile
Coppermine Photo Gallery (CPG) 1.4.14 does not restrict access to update.php, which allows remote attackers to obtain sensitive information such as the database table prefix via a direct request. NOTE: this might be leveraged for attacks against CVE-2008-0504.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| coppermine-gallery | coppermine_photo_gallery | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://www.securityfocus.com/archive/1/487351/100/200/threadedhttp://www.securitytracker.com/id?1019285http://www.vupen.com/english/advisories/2008/0367http://www.waraxe.us/advisory-66.htmlhttp://www.securityfocus.com/archive/1/487351/100/200/threadedhttp://www.securitytracker.com/id?1019285http://www.vupen.com/english/advisories/2008/0367http://www.waraxe.us/advisory-66.html
2009-09-09
Published