CVE-2004-1986: Medium severity Coppermine Coppermine Photo Gallery vulnerability
Published Apr 4, 2004
·Updated
Directory traversal vulnerability in modules.php in Coppermine Photo Gallery 1.2.2b and 1.2.0 RC4 allows remote attackers with administrative privileges to read arbitrary files via a .. (dot dot) in the startdir parameter.
Affected Software
11 affected components
Coppermine Coppermine Photo Gallery=1.1_beta_2
Coppermine Coppermine Photo Gallery=1.2
Francisco Burzi PHP-Nuke=7.0
Francisco Burzi PHP-Nuke=7.2
Francisco Burzi PHP-Nuke=7.0_final
Coppermine Coppermine Photo Gallery=1.0_rc3
Coppermine Coppermine Photo Gallery=1.2.2_b
Coppermine Coppermine Photo Gallery=1.2.1
Coppermine Coppermine Photo Gallery=1.1_.0
Francisco Burzi PHP-Nuke=6.9
Francisco Burzi PHP-Nuke=7.1
Event History
Apr 4, 2004
CVE Published
05:00 AM
May 10, 2005
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-1986?
CVE-2004-1986 is considered a medium severity vulnerability due to its ability to allow unauthorized file access.
2
How do I fix CVE-2004-1986?
To fix CVE-2004-1986, update to the latest version of Coppermine Photo Gallery that addresses this vulnerability.
3
Which versions are affected by CVE-2004-1986?
CVE-2004-1986 affects Coppermine Photo Gallery versions 1.2.2b, 1.2.1, 1.2, and earlier versions.
4
What type of vulnerability is CVE-2004-1986?
CVE-2004-1986 is a directory traversal vulnerability that allows attackers to access arbitrary files on the server.
5
Can CVE-2004-1986 be exploited remotely?
Yes, CVE-2004-1986 can be exploited remotely by attackers with administrative privileges.