PT-2007-1607 · Coppermine · Coppermine Photo Gallery

Darkfig · Published 2007-01-09 · Updated 2018-10-16 · CVE-2007-0122

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Coppermine Photo Gallery versions 1.4.10 and earlier

Description The issue allows remote authenticated administrators to execute arbitrary SQL commands. This can be achieved via the cat parameter to "albmgr.php", and possibly the gid parameter to "usermgr.php", the start parameter to "db ecard.php", and the albumid parameter to unspecified files. The filename to title and del titles functions are also related to this issue.

Recommendations For Coppermine Photo Gallery versions 1.4.10 and earlier, consider disabling access to the "albmgr.php" and "usermgr.php" files until a patch is available. Restrict the use of the cat, gid, start, and albumid parameters in the affected API endpoints to minimize the risk of exploitation. Avoid using the filename to title and del titles functions until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2007-0122

Affected Products

Coppermine Photo Gallery

References · 14

• 🔥 http://securityfocus.com/bid/21894 · Exploit
• 🔥 https://exploit-db.com/exploits/3085 · Exploit
• 🔥 https://exploit-db.com/exploits/29397 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-0122 · Security Note
• http://osvdb.org/35853 · Note
• http://osvdb.org/35852 · Note
• http://osvdb.org/35855 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0122 · Note
• http://secunia.com/advisories/25846 · Note
• http://securityreason.com/securityalert/2123 · Note
• http://acid-root.new.fr/poc/19070104.txt · Note
• http://securityfocus.com/archive/1/456051/100/0/threaded · Note
• http://osvdb.org/35856 · Note
• http://osvdb.org/35854 · Note