Vulnerabilities > CVE-2004-1986 - Input Validation vulnerability in Coppermine Photo Gallery
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
NONE Availability impact
NONE Summary
Directory traversal vulnerability in modules.php in Coppermine Photo Gallery 1.2.2b and 1.2.0 RC4 allows remote attackers with administrative privileges to read arbitrary files via a .. (dot dot) in the startdir parameter.
Vulnerable Configurations
Part | Description | Count |
---|---|---|
Application | 6 | |
Application | 5 |
Exploit-Db
description | Coppermine Photo Gallery 1.x modules.php startdir Parameter Traversal Arbitrary File Access. CVE-2004-1986 . Webapps exploit for php platform |
id | EDB-ID:24073 |
last seen | 2016-02-02 |
modified | 2004-04-30 |
published | 2004-04-30 |
reporter | Janek Vind |
source | https://www.exploit-db.com/download/24073/ |
title | Coppermine Photo Gallery 1.x modules.php startdir Parameter Traversal Arbitrary File Access |