CVE-2006-0873: Path Traversal

Published Feb 24, 2006

Updated

Absolute path traversal vulnerability in docs/showdocs.php in Coppermine Photo Gallery 1.4.3 and earlier allows remote attackers to include arbitrary files via the f parameter, and possibly remote files using UNC share pathnames.

Affected Software

1 affected component

Coppermine Coppermine Photo Gallery=1.4.3

Remediation

Patch Available

http://coppermine-gallery.net/forum/index.php?topic=28062.0

Event History

Feb 24, 2006

CVE Published

11:02 AM

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2006-0873?

CVE-2006-0873 is considered a high-severity vulnerability due to its potential to allow remote file inclusion.

How do I fix CVE-2006-0873?

To fix CVE-2006-0873, upgrade Coppermine Photo Gallery to version 1.4.4 or later, which addresses this vulnerability.

What are the potential impacts of CVE-2006-0873?

The impact of CVE-2006-0873 includes unauthorized access to sensitive files on the server and possible execution of arbitrary code.

Who is affected by CVE-2006-0873?

CVE-2006-0873 affects users of Coppermine Photo Gallery versions 1.4.3 and earlier.

How can attackers exploit CVE-2006-0873?

Attackers can exploit CVE-2006-0873 by manipulating the 'f' parameter in requests to include arbitrary files on the server.