PT-2007-2535 · Coppermine · Coppermine Photo Gallery

Rst/Ghc · Publicado 2007-02-26 · Atualizado 2018-10-16 · CVE-2007-1107

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Coppermine Photo Gallery versions 1.3.x through 1.4.x

Description The issue allows remote authenticated users to execute arbitrary SQL commands. This is achieved via a cpg131 fav cookie in the thumbnails.php file. The estimated number of potentially affected devices and details about real-world incidents are not specified.

Recommendations For Coppermine Photo Gallery versions 1.3.x through 1.4.x, consider restricting access to the thumbnails.php file until a fix is available. As a temporary workaround, avoid using the cpg131 fav cookie in the affected API endpoint.

Exploit

Correção

Identificadores relacionados

CVE-2007-1107

Produtos afetados

Coppermine Photo Gallery

Referências · 12

• 🔥 https://exploit-db.com/exploits/4961 · Exploit
• 🔥 https://exploit-db.com/exploits/4950 · Exploit
• 🔥 https://exploit-db.com/exploits/3371 · Exploit
• http://osvdb.org/33133 · Nota
• http://securityfocus.com/bid/22709 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/32688 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1107 · Nota
• http://securityfocus.com/bid/27372 · Nota
• http://securityreason.com/securityalert/2297 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/39806 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-1107 · Nota de Segurança
• http://securityfocus.com/archive/1/461158/100/0/threaded · Nota