Beveiligingsadvies

CVE-2008-7186

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2009-09-09 17:00:00
Laatst bijgewerkt 2024-08-07 11:56:14
Toegewezen door mitre
CVSS-score geen score
Status PUBLISHED

Beschrijving

Coppermine Photo Gallery (CPG) 1.4.14 does not restrict access to update.php, which allows remote attackers to obtain sensitive information such as the database table prefix via a direct request. NOTE: this might be leveraged for attacks against CVE-2008-0504.