Coppermine Photo Gallery 1.2.2b and 1.2.0 RC4 allows remote malicious users to obtain sensitive information via a direct HTTP request to (1) phpinfo.php, (2) addpic.php, (3) config.php, (4) db_input.php, (5) displayecard.php, (6) ecard.php, (7) crop.inc.php, which reveal the full path in a PHP error message.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
coppermine coppermine photo gallery 1.1_.0 |
||
coppermine coppermine photo gallery 1.1_beta_2 |
||
francisco burzi php-nuke 7.2 |
||
coppermine coppermine photo gallery 1.0_rc3 |
||
francisco burzi php-nuke 7.0_final |
||
francisco burzi php-nuke 7.1 |
||
coppermine coppermine photo gallery 1.2 |
||
coppermine coppermine photo gallery 1.2.1 |
||
coppermine coppermine photo gallery 1.2.2_b |
||
francisco burzi php-nuke 6.9 |
||
francisco burzi php-nuke 7.0 |