CVE-2004-1989: High severity Coppermine Coppermine Photo Gallery vulnerability
Published Apr 30, 2004
·Updated
PHP remote file inclusion vulnerability in theme.php in Coppermine Photo Gallery 1.2.2b allows remote attackers to execute arbitrary PHP code by modifying the THEMEDIR parameter to reference a URL on a remote web server that contains userlistinfobox.inc.
Affected Software
11 affected components
Coppermine Coppermine Photo Gallery=1.0_rc3
Coppermine Coppermine Photo Gallery=1.1_.0
Coppermine Coppermine Photo Gallery=1.1_beta_2
Coppermine Coppermine Photo Gallery=1.2
Coppermine Coppermine Photo Gallery=1.2.1
Coppermine Coppermine Photo Gallery=1.2.2_b
Francisco Burzi PHP-Nuke=6.9
Francisco Burzi PHP-Nuke=7.0
Francisco Burzi PHP-Nuke=7.0_final
Francisco Burzi PHP-Nuke=7.1
Francisco Burzi PHP-Nuke=7.2
Event History
Apr 30, 2004
CVE Published
04:00 AM
May 10, 2005
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-1989?
CVE-2004-1989 has a high severity rating due to its potential for remote code execution.
2
How do I fix CVE-2004-1989?
To fix CVE-2004-1989, update Coppermine Photo Gallery to a version that addresses this vulnerability.
3
Which versions are affected by CVE-2004-1989?
CVE-2004-1989 affects Coppermine Photo Gallery versions 1.0_rc3 through 1.2.2b and PHP-Nuke versions 6.9 to 7.2.
4
What type of vulnerability is CVE-2004-1989?
CVE-2004-1989 is classified as a remote file inclusion vulnerability.
5
Can CVE-2004-1989 be exploited by a remote attacker?
Yes, CVE-2004-1989 can be exploited by remote attackers to execute arbitrary PHP code.