Coppermine Photo Gallery (yabbse.inc.php) Remote File Inclusion Vulnerability

Coppermine Photo Gallery 1.3.1 Remote File Inclusion Vulnerability DoRk:"Powered by Coppermine Photo Gallery" Vuln. code: requireonce"$sourcedir/Load.php";requireonce"$sourcedir/Security.php"; Exploit: www.server.com/path/bridge/yabbse.inc.php?sourcedir=Sh3LL Author:Ma$tEr-0F-De$a$t0r...

Remote file inclusion

PHP remote file inclusion vulnerability in bridge/yabbse.inc.php in Coppermine Photo Gallery CPG 1.3.1 allows remote attackers to execute arbitrary PHP code via a URL in the sourcedir parameter...

CVE-2007-4283

PHP remote file inclusion vulnerability in bridge/yabbse.inc.php in Coppermine Photo Gallery CPG 1.3.1 allows remote attackers to execute arbitrary PHP code via a URL in the sourcedir parameter...

CVE-2007-4283

PHP remote file inclusion vulnerability in bridge/yabbse.inc.php in Coppermine Photo Gallery CPG 1.3.1 allows remote attackers to execute arbitrary PHP code via a URL in the sourcedir parameter...

CVE-2007-4283

The CVE-2007-4283 entry describes a PHP remote file inclusion vulnerability in Coppermine Photo Gallery (CPG) 1.3.1, specifically in bridge/yabbse.inc.php where an attacker can supply a URL via the sourcedir parameter to execute arbitrary PHP code. Affected software is Coppermine Photo Gallery; t...

Coppermine Photo Gallery YABBSE.INC.PHP远程文件包含漏洞

Coppermine Photo Gallery是一款基于PHP的WEB应用程序。 Coppermine Photo Gallery不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是'YABBSE.INC.PHP'脚本对用户提交的'sourcedir'参数缺少过滤，指定远程服务器上的任意文件作为包含对象，可导致以WEB权限执行任意PHP代码。 Coppermine Photo Gallery 1.4 Coppermine Photo Gallery 1.3.4 Coppermine Photo Gallery 1.3.3 Coppermine Photo...

Coppermine Photo Gallery 1.3/1.4 - 'YABBSE.INC.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/25243/info Coppermine Photo Gallery is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other...

Coppermine Photo Gallery 1.31.4 - YABBSE.INC.php Remote File Inclusion

Coppermine Photo Gallery 1.31.4 - YABBSE.INC.php Remote File Inclusion source: https://www.securityfocus.com/bid/25243/info Coppermine Photo Gallery is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an...

Sql injection

SQL injection vulnerability in Coppermine Photo Gallery CPG before 1.4.11 allows remote attackers to execute arbitrary SQL commands via an album password cookie to an unspecified component...

CVE-2007-3558

SQL injection vulnerability in Coppermine Photo Gallery CPG before 1.4.11 allows remote attackers to execute arbitrary SQL commands via an album password cookie to an unspecified component...

CVE-2007-3558

Coppermine Photo Gallery is affected by CVE-2007-3558: versions before 1.4.11 are vulnerable to a SQL injection via the album password cookie. The root cause is lack of sanitization in get_private_album_set in include/functions.inc.php, allowing remote attackers to manipulate database queries. Po...

CVE-2007-3558

SQL injection vulnerability in Coppermine Photo Gallery CPG before 1.4.11 allows remote attackers to execute arbitrary SQL commands via an album password cookie to an unspecified component...

Remote File Include In Coppermine Photo Gallery

By Hasadya Raed Contact : [email protected] ------------------------------------ Script : Coppermine Photo Gallery Dork : Copyright c 2003-2006 Coppermine Dev Team ------------------------------------ B.Files : processor.php include/functions.php include/picmgmt.inc.php include/pluginapi.inc.php...

cpg-rfi.txt

By Hasadya Raed Contact : [email protected] ------------------------------------ Script : Coppermine Photo Gallery Dork : Copyright c 2003-2006 Coppermine Dev Team ------------------------------------ B.Files : processor.php include/functions.php include/picmgmt.inc.php include/pluginapi.inc.php...

copperminepg-rfi.txt

By Hasadya Raed Contact : [email protected] ------------------------------------ Script : Coppermine Photo Gallery Expl : Remote Include File Dork : "Copyright c 2003-2006 Coppermine Dev Team" ------------------------------------ B.Files : imageprocessor.php functions.php picmgmt.inc.php...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in Coppermine Photo Gallery CPG allow remote attackers to execute arbitrary PHP code via a URL in the 1 cmd parameter to a imageprocessor.php or b picmgmt.inc.php, or the 2 path parameter to c include/functions.php, d include/pluginapi.inc.php, e...

CVE-2007-1414

Multiple PHP remote file inclusion vulnerabilities in Coppermine Photo Gallery CPG allow remote attackers to execute arbitrary PHP code via a URL in the 1 cmd parameter to a imageprocessor.php or b picmgmt.inc.php, or the 2 path parameter to c include/functions.php, d include/pluginapi.inc.php, e...

CVE-2007-1414

Multiple PHP remote file inclusion vulnerabilities in Coppermine Photo Gallery CPG allow remote attackers to execute arbitrary PHP code via a URL in the 1 cmd parameter to a imageprocessor.php or b picmgmt.inc.php, or the 2 path parameter to c include/functions.php, d include/pluginapi.inc.php, e...

CVE-2007-1414

The CVE-2007-1414 issue affects Coppermine Photo Gallery (CPG). Multiple PHP remote file inclusion vulnerabilities allow an attacker to execute arbitrary PHP code by supplying URLs in the affected parameters: (1) cmd in image_processor.php or picmgmt.inc.php, and (2) path in include/functions.php...

Remote File Include In Script Coppermine Photo Gallery

By Hasadya Raed Contact : [email protected] ------------------------------------ Script : Coppermine Photo Gallery Expl : Remote Include File Dork : "Copyright c 2003-2006 Coppermine Dev Team" ------------------------------------ B.Files : imageprocessor.php functions.php picmgmt.inc.php...