Vulnerabilities > CVE-2007-0836 - Remote And Local File Include vulnerability in Coppermine Photo Gallery

047910
CVSS 4.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
SINGLE
Confidentiality impact
NONE
Integrity impact
PARTIAL
Availability impact
NONE
network
low complexity
coppermine
exploit available
NVD
Published: 2007-02-08
Updated: 2017-07-29

Summary

admin.php in Coppermine Photo Gallery 1.4.10, and possibly earlier, allows remote authenticated users to include arbitrary local and possibly remote files via the (1) "Path to custom header include" and (2) "Path to custom footer include" form fields. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.

Vulnerable Configurations

Part Description Count
Application
Coppermine
1

Exploit-Db

descriptionCoppermine Photo Gallery 1.4.10 Multiple Remote And Local File Include Vulnerabilities. CVE-2007-0836. Webapps exploit for php platform
idEDB-ID:29568
last seen2016-02-03
modified2007-02-05
published2007-02-05
reporteranonymous
sourcehttps://www.exploit-db.com/download/29568/
titleCoppermine Photo Gallery 1.4.10 - Multiple Remote And Local File Include Vulnerabilities

References