Absolute path traversal vulnerability in docs/showdocs.php in Coppermine Photo Gallery 1.4.3 and earlier allows remote attackers to include arbitrary files via the f parameter, and possibly remote files using UNC share pathnames.
References
Configurations
History
21 Nov 2024, 00:07
Type | Values Removed | Values Added |
---|---|---|
References | () http://coppermine-gallery.net/forum/index.php?topic=28062.0 - Patch | |
References | () http://retrogod.altervista.org/cpg_143_adv.html - Exploit | |
References | () http://secunia.com/advisories/18941 - Vendor Advisory | |
References | () http://securitytracker.com/id?1015646 - Exploit | |
References | () http://www.securityfocus.com/archive/1/425387 - | |
References | () http://www.securityfocus.com/bid/16718 - | |
References | () http://www.vupen.com/english/advisories/2006/0669 - | |
References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/24816 - |
Information
Published : 2006-02-24 11:02
Updated : 2024-11-21 00:07
NVD link : CVE-2006-0873
Mitre link : CVE-2006-0873
CVE.ORG link : CVE-2006-0873
JSON object : View
Products Affected
coppermine
- coppermine_photo_gallery
CWE