PT-2006-5130 · Coppermine · Coppermine Photo Gallery

K1Tk4T · Publicado 2006-08-24 · Atualizado 2017-10-19 · CVE-2006-4321

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Coppermine Photo Gallery component (com cpg) version 1.0 and earlier

Description The issue allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig absolute path parameter. This can be exploited by providing a malicious URL to the vulnerable component.

Recommendations For Coppermine Photo Gallery component (com cpg) version 1.0 and earlier, consider disabling the mosConfig absolute path parameter or restricting its use to minimize the risk of exploitation until a patch is available.

Exploit

Correção

Identificadores relacionados

CVE-2006-4321

Produtos afetados

Coppermine Photo Gallery

Referências · 8

• 🔥 https://exploit-db.com/exploits/2196 · Exploit
• 🔥 http://secunia.com/advisories/21539 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28413 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4321 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-4321 · Nota de Segurança
• http://osvdb.org/27970 · Nota
• http://securityfocus.com/bid/19589 · Nota
• http://vupen.com/english/advisories/2006/3310 · Nota