Lucene search
HistorySep 09, 2009 - 5:30 p.m.
CVE-2008-7186
coppermine photo gallery
cpg
cve-2008-7186
security vulnerability
information disclosure
6.1 Medium
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.006 Low
EPSS
Percentile
77.7%
Coppermine Photo Gallery (CPG) 1.4.14 does not restrict access to update.php, which allows remote attackers to obtain sensitive information such as the database table prefix via a direct request. NOTE: this might be leveraged for attacks against CVE-2008-0504.
Affected configurations
Node
coppermine-gallerycoppermine_photo_galleryMatch1.4.14
| CPE | Name | Operator | Version |
|---|---|---|---|
| coppermine-gallery:coppermine_photo_gallery | coppermine-gallery coppermine photo gallery | eq | 1.4.14 |
Related
cvelist
cvelist
CVE-2008-7186
2009-09-09 17:00:00
CVE-2008-0504
2008-01-31 19:30:00
nvd
nvd
CVE-2008-7186
2009-09-09 17:30:01
CVE-2008-0504
2008-01-31 20:00:00
prion
prion
Design/Logic Flaw
2009-09-09 17:30:00
Sql injection
2008-01-31 20:00:00
cve
cve
CVE-2008-0504
2008-01-31 20:00:00
freebsd
freebsd
coppermine -- multiple vulnerabilities
2007-11-06 00:00:00
openvas
openvas
FreeBSD Ports: coppermine
2008-09-04 00:00:00
FreeBSD Ports: coppermine
2008-09-04 00:00:00
nessus
nessus
6.1 Medium
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.006 Low
EPSS
Percentile
77.7%
Related for CVE-2008-7186