602 matches found
CVE-2006-0872
Directory traversal vulnerability in init.inc.php in Coppermine Photo Gallery 1.4.3 and earlier allows remote attackers to include arbitrary files via a .. dot dot sequence and trailing NULL %00 byte in the lang parameter...
CVE-2006-0872
CVE-2006-0872 describes a directory traversal vulnerability in Coppermine Photo Gallery
CVE-2006-0873: Undefined Security Weakness
Absolute path traversal vulnerability in docs/showdocs.php in Coppermine Photo Gallery 1.4.3 and earlier allows remote attackers to include arbitrary files via the f parameter, and possibly remote files using UNC share pathnames...
CVE-2006-0872: Undefined Security Weakness
Directory traversal vulnerability in init.inc.php in Coppermine Photo Gallery 1.4.3 and earlier allows remote attackers to include arbitrary files via a .. dot dot sequence and trailing NULL %00 byte in the lang parameter...
cpg_143_incl_xpl
this works regardless of any php.ini settings, you need a normal user account with upload rights in personal albums and at least one album usage: launch from Apache, fill in requested fields, then go! Sun-Tzu: "The direct and the indirect lead on to each other in turn. It is like moving in a...
Dragonfly CMS 9.0.6.1 Coppermine Module - 'album' Cross-Site Scripting
source: https://www.securityfocus.com/bid/16784/info Dragonfly is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in...
Coppermine Photo Gallery <=1.4.3 remote code execution
Coppermine Photo Gallery = 1.4.3 arbitrary local/remote inclusion: --------- - 18/02/2006 5.09.55 ----------------------------------------------------------- -------------------------------------------------------------------------------- software: site: http://coppermine-gallery.net/index.php...
Coppermine Gallery < 1.4.4 Script Injection
Binary data 3436.prm...
coppermine -- File Inclusion Vulnerabilities
Secunia reports: Coppermine Photo Gallery have a vulnerability, which can be exploited by malicious people and by malicious users to compromise a vulnerable system. 1 Input passed to the "lang" parameter in include/init.inc.php isn't properly verified, before it is used to include files. This can...
Coppermine Photo Gallery 1.4.3 - Remote Command Execution
Coppermine Photo Gallery 1.4.3 - Remote Command Execution this works regardless of any php.ini settings, you need a normal user account with upload rights in personal albums and at least one album usage: launch from Apache, fill in requested fields, then go! Sun-Tzu: "The direct and the indirect...
Coppermine Photo Gallery 1.4.3 - Remote Command Execution
this works regardless of any php.ini settings, you need a normal user account with upload rights in personal albums and at least one album usage: launch from Apache, fill in requested fields, then go! Sun-Tzu: "The direct and the indirect lead on to each other in turn. It is like moving in a...
Coppermine Photo Gallery <= 1.4.3 Remote Commands Execution Exploit
Exploit for unknown platform in category web applications =================================================================== Coppermine Photo Gallery this works regardless of any php.ini settings, you need a normal user account with upload rights in personal albums and at least one album usage:...
Coppermine Photo Gallery <= 1.4.3 Remote Commands Execution Exploit
No description provided by source. ?php ---cpg143inclxpl.php 15.38 04/12/2005 Coppermine Photo Gallery = 1.4.3 remote commands execution coded by rgod site: http://retrogod.altervista.org - this works regardless of any php.ini settings, you need a normal user account with upload rights in persona...
CVE-2005-3979
CVE-2005-3979 affects Coppermine Photo Gallery (CPG) versions 1.4.2 and 1.4 beta. The file relocate_server.php is not removed after installation and does not require authentication, enabling remote attackers to obtain sensitive information (e.g., database configuration) via a direct request. The ...
CVE-2005-3979
relocateserver.php in Coppermine Photo Gallery CPG 1.4.2 and 1.4 beta is not removed after installation and does not use authentication, which allows remote attackers to obtain sensitive information, such as database configuration, via a direct request...
CVE-2005-3979: Improper Authentication
relocateserver.php in Coppermine Photo Gallery CPG 1.4.2 and 1.4 beta is not removed after installation and does not use authentication, which allows remote attackers to obtain sensitive information, such as database configuration, via a direct request...
[SA17855] Coppermine Photo Gallery "relocate_server.php" Exposure of Configuration
TITLE: Coppermine Photo Gallery "relocateserver.php" Exposure of Configuration SECUNIA ADVISORY ID: SA17855 VERIFY ADVISORY: http://secunia.com/advisories/17855/ CRITICAL: Moderately critical IMPACT: Exposure of sensitive information WHERE: From remote SOFTWARE: Coppermine Photo Gallery 1.x...
Coppermine Photo Gallery <= 1.3.2 File Retrieval SQL Injection Exploit
Exploit for unknown platform in category web applications ====================================================================== Coppermine Photo Gallery By DiGiTALMiDWAY import urllib2, sys from urllib import urlencode import zipfile iflensys.argv2: print 'usage : %s http://host/Path/...
Coppermine Photo Gallery 1.3.2 - File Retrieval / SQL Injection
tested and approved /str0ke CPG Exploit File Retrieval by SQL Injection. By Default this exploit get the config.inc.php file which contains the db user/pass If you want to get another file you need to have the good cookie you can use this phpscript to get good cookie : By DiGiTALMiDWAY import...
Coppermine Photo Gallery 1.3.2 - File Retrieval SQL Injection
Coppermine Photo Gallery 1.3.2 - File Retrieval SQL Injection tested and approved /str0ke CPG Exploit File Retrieval by SQL Injection. By Default this exploit get the config.inc.php file which contains the db user/pass If you want to get another file you need to have the good cookie you can use...