CVE-2006-4321: High severity Coppermine Coppermine Photo Gallery vulnerability

Published Aug 24, 2006

Updated

PHP remote file inclusion vulnerability in cpg.php in the Coppermine Photo Gallery component (comcpg) 1.0 and earlier for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter.

Affected Software

1 affected component

Coppermine Coppermine Photo Gallery=1.0

Event History

Aug 24, 2006

CVE Published

01:04 AM

CVE Published

via MITRE·05:00 AM

Data Sourced

via MITRE·05:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2006-4321?

CVE-2006-4321 is considered a high severity vulnerability due to its potential for remote code execution.

How do I fix CVE-2006-4321?

To fix CVE-2006-4321, upgrade to a later version of the Coppermine Photo Gallery that addresses the remote file inclusion issue.

What is affected by CVE-2006-4321?

CVE-2006-4321 affects Coppermine Photo Gallery version 1.0 and earlier when integrated with Mambo.

What type of vulnerability is CVE-2006-4321?

CVE-2006-4321 is classified as a remote file inclusion vulnerability, allowing attackers to run arbitrary PHP code.

Can CVE-2006-4321 be exploited without authentication?

Yes, CVE-2006-4321 can be exploited by unauthenticated remote attackers, posing a significant risk.