CVE-2005-3979

relocate_server.php in Coppermine Photo Gallery (CPG) 1.4.2 and 1.4 beta is not removed after installation and does not use authentication, which allows remote attackers to obtain sensitive information, such as database configuration, via a direct request.
References
Link Resource
http://coppermine-gallery.net/forum/index.php?topic=24217.0 Vendor Advisory
http://secunia.com/advisories/17855 Permissions Required Third Party Advisory
http://www.vupen.com/english/advisories/2005/2698 Permissions Required Third Party Advisory
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

OR cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4:beta:*:*:*:*:*:*
cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.2:*:*:*:*:*:*:*

Information

Published : 2005-12-03 11:03

Updated : 2019-07-16 12:37


NVD link : CVE-2005-3979

Mitre link : CVE-2005-3979


JSON object : View

CWE
CWE-287

Improper Authentication

Advertisement

dedicated server usa

Products Affected

coppermine-gallery

  • coppermine_photo_gallery