CVE-2008-7187

Coppermine Photo Gallery (CPG) 1.4.14 allows remote attackers to obtain sensitive information via a direct request to include/slideshow.inc.php, which leaks the installation path in an error message.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2009-09-09

Last modified

2024-08-07

Weaknesses

CWE-200

Affected products

• Coppermine Photo Gallery (Coppermine-gallery)

References

• http://www.securityfocus.com/archive/1/487351/100/200/threaded
• http://www.securitytracker.com/id?1019285
• http://www.vupen.com/english/advisories/2008/0367
• http://www.waraxe.us/advisory-66.html