CVE-2012-1614: Exposure of Sensitive Information to an Unauthorized Actor

Coppermine Photo Gallery before 1.5.20 allows remote attackers to obtain sensitive information via 1 a direct request to plugins/visiblehookpoints/index.php, an invalid 2 page or 3 cat parameter to thumbnails.php, an invalid 4 page parameter to usermgr.php, or an invalid 5 newerthan or 6 oldertha...

PT-2012-3383

Name of the Vulnerable Software and Affected Versions Coppermine Photo Gallery versions prior to 1.5.20 Description The issue allows remote attackers to obtain sensitive information via various invalid parameters to different scripts, which reveals the installation path in an error message. This...