CVE-2007-1414 - Multiple PHP remote file inclusion vulnerabilities in Coppermine Photo Gallery (CPG) allow remote at

CVE-2007-1414

Summary

Multiple PHP remote file inclusion vulnerabilities in Coppermine Photo Gallery (CPG) allow remote attackers to execute arbitrary PHP code via a URL in the (1) cmd parameter to (a) image_processor.php or (b) picmgmt.inc.php, or the (2) path parameter to (c) include/functions.php, (d) include/plugin_api.inc.php, (e) index.php, or (f) pluginmgr.php.

References

Vulnerable Configurations

cpe:2.3:a:coppermine:coppermine_photo_gallery:*:*:*:*:*:*:*:*
cpe:2.3:a:coppermine:coppermine_photo_gallery:*:*:*:*:*:*:*:*

CVSS

Base:	10.0 (as of 16-10-2018 - 16:38)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
COMPLETE	COMPLETE	COMPLETE

cvss-vector via4

AV:N/AC:L/Au:N/C:C/I:C/A:C

refmap via4

bid	22896
bugtraq	20070309 Remote File Include In Script Coppermine Photo Gallery 20070322 Remote File Include In Coppermine Photo Gallery
osvdb	35065 35066 35067 35068 35069 35070
sreason	2416
xf	coppermine-multiple-scripts-file-include(32894)

Last major update

16-10-2018 - 16:38

Published

12-03-2007 - 23:19

Last modified

16-10-2018 - 16:38