CVE-2012-1614
- State
- Published
- Severity
- Not scored
- Published
- Sep 4, 2012
- Updated
- Sep 17, 2024
- Reserved
- Mar 12, 2012
Description
Coppermine Photo Gallery before 1.5.20 allows remote attackers to obtain sensitive information via (1) a direct request to plugins/visiblehookpoints/index.php, an invalid (2) page or (3) cat parameter to thumbnails.php, an invalid (4) page parameter to usermgr.php, or an invalid (5) newer_than or (6) older_than parameter to search.inc.php, which reveals the installation path in an error message.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 20120329 [waraxe-2012-SA#081] - Multiple Vulnerabilities in Coppermine 1.5.18mailing-list
- http://www.waraxe.us/advisory-81.html
- http://packetstormsecurity.org/files/111369/Coppermine-1.5.18-Cross-Site-Scripting-Path-Disclosure.html
- 18680exploit
- 80734vdb-entry
- 80735vdb-entry
- http://coppermine.svn.sourceforge.net/viewvc/coppermine/trunk/cpg1.6.x/edit_one_pic.php?r1=8348&r2=8354
- 80732vdb-entry
- 80733vdb-entry
- 52818vdb-entry
- [oss-security] 20120330 Re: CVE-request: Coppermine 1.5.18 waraxe-2012-SA#081mailing-list
- http://forum.coppermine-gallery.net/index.php/topic%2C74682.0.html
- [oss-security] 20120403 Re: CVE-request: Coppermine 1.5.18 waraxe-2012-SA#081mailing-list
- [oss-security] 20120330 CVE-request: Coppermine 1.5.18 waraxe-2012-SA#081mailing-list
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.