PT-2006-5130 · Coppermine · Coppermine Photo Gallery

K1Tk4T · Published 2006-08-24 · Updated 2017-10-19 · CVE-2006-4321

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Coppermine Photo Gallery component (com cpg) version 1.0 and earlier

Description The issue allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig absolute path parameter. This can be exploited by providing a malicious URL to the vulnerable component.

Recommendations For Coppermine Photo Gallery component (com cpg) version 1.0 and earlier, consider disabling the mosConfig absolute path parameter or restricting its use to minimize the risk of exploitation until a patch is available.

Exploit

Fix

Related Identifiers

CVE-2006-4321

Affected Products

Coppermine Photo Gallery

References · 8

• 🔥 https://exploit-db.com/exploits/2196 · Exploit
• 🔥 http://secunia.com/advisories/21539 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-4321 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28413 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4321 · Note
• http://osvdb.org/27970 · Note
• http://securityfocus.com/bid/19589 · Note
• http://vupen.com/english/advisories/2006/3310 · Note