themes/sample/theme.php in Coppermine Photo Gallery (CPG) 1.4.18 and earlier allows remote attackers to obtain sensitive information via a direct request, which reveals the installation path in an error message.
References
Configurations
Configuration 1 (hide)
|
Information
Published : 2008-08-05 12:41
Updated : 2017-09-28 18:31
NVD link : CVE-2008-3481
Mitre link : CVE-2008-3481
JSON object : View
CWE
CWE-94
Improper Control of Generation of Code ('Code Injection')
Products Affected
coppermine-gallery
- coppermine_photo_gallery