CVE-2004-1988: High severity Coppermine Coppermine Photo Gallery vulnerability
PHP remote file inclusion vulnerability in init.inc.php in Coppermine Photo Gallery 1.2.0 RC4 allows remote attackers to execute arbitrary PHP code by modifying the CPGMDIR to reference a URL on a remote web server that contains functions.inc.php.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2004-1988?
CVE-2004-1988 is considered a high severity vulnerability due to its potential for remote code execution.
How do I fix CVE-2004-1988?
To fix CVE-2004-1988, users should upgrade to a patched version of Coppermine Photo Gallery that addresses the remote file inclusion vulnerability.
Which versions are affected by CVE-2004-1988?
CVE-2004-1988 affects Coppermine Photo Gallery versions 1.1_beta_2 through 1.2.2_b and also specific versions of PHP-Nuke.
How does CVE-2004-1988 work?
CVE-2004-1988 allows attackers to exploit a remote file inclusion flaw by modifying the CPG_M_DIR variable.
Who can be impacted by CVE-2004-1988?
Users of vulnerable versions of Coppermine Photo Gallery and PHP-Nuke could be impacted by CVE-2004-1988 if they do not apply security updates.