Coppermine Photo Gallery (CPG) 1.4.14 does not restrict access to update.php, which allows remote attackers to obtain sensitive information such as the database table prefix via a direct request. NOTE: this might be leveraged for attacks against CVE-2008-0504.
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2009-09-09T17:00:00
Updated: 2018-10-11T19:57:01
Reserved: 2009-09-09T00:00:00
Link: CVE-2008-7186
JSON object: View
NVD Information
Status : Modified
Published: 2009-09-09T17:30:01.093
Modified: 2018-10-11T20:58:26.803
Link: CVE-2008-7186
JSON object: View
Redhat Information
No data.
CWE