CVE-2007-4976

2007-09-1918:17:00

CWE-22

mitre

web.nvd.nist.gov

cve-2007-4976

directory traversal

viewlog.php

coppermine photo gallery

remote code execution

authentication bypass

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

AI Score

6.6

Confidence

Low

EPSS

0.013

Percentile

85.7%

JSON

Directory traversal vulnerability in viewlog.php in Coppermine Photo Gallery (CPG) 1.4.12 and earlier allows remote authenticated administrators to include and execute arbitrary local files via a … (dot dot) in the log parameter.

Affected configurations

Nvd

Node

copperminecoppermine_photo_galleryMatch1.4

copperminecoppermine_photo_galleryMatch1.4.2

copperminecoppermine_photo_galleryMatch1.4.4

copperminecoppermine_photo_galleryMatch1.4.9

copperminecoppermine_photo_galleryMatch1.4.10

copperminecoppermine_photo_galleryMatch1.4.11

copperminecoppermine_photo_galleryMatch1.4.12

VendorProductVersionCPE
copperminecoppermine_photo_gallery1.4cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4:*:*:*:*:*:*:*
copperminecoppermine_photo_gallery1.4.2cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4.2:*:*:*:*:*:*:*
copperminecoppermine_photo_gallery1.4.4cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4.4:*:*:*:*:*:*:*
copperminecoppermine_photo_gallery1.4.9cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4.9:*:*:*:*:*:*:*
copperminecoppermine_photo_gallery1.4.10cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4.10:*:*:*:*:*:*:*
copperminecoppermine_photo_gallery1.4.11cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4.11:*:*:*:*:*:*:*
copperminecoppermine_photo_gallery1.4.12cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4.12:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
coppermine	coppermine_photo_gallery	1.4	cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4:::::::*
coppermine	coppermine_photo_gallery	1.4.2	cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4.2:::::::*
coppermine	coppermine_photo_gallery	1.4.4	cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4.4:::::::*
coppermine	coppermine_photo_gallery	1.4.9	cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4.9:::::::*
coppermine	coppermine_photo_gallery	1.4.10	cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4.10:::::::*
coppermine	coppermine_photo_gallery	1.4.11	cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4.11:::::::*
coppermine	coppermine_photo_gallery	1.4.12	cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4.12:::::::*