CVE-2007-0115: Code Injection
Static code injection vulnerability in Coppermine Photo Gallery 1.4.10 and earlier allows remote authenticated administrators to execute arbitrary PHP code via the Username to login.php, which is injected into an error message in security.log.php, which can then be accessed using viewlog.php.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-0115?
CVE-2007-0115 is considered a critical vulnerability due to its ability to allow remote code execution by authenticated users.
How do I fix CVE-2007-0115?
To fix CVE-2007-0115, you should upgrade to Coppermine Photo Gallery version 1.4.11 or later.
What are the potential impacts of CVE-2007-0115?
The potential impacts of CVE-2007-0115 include unauthorized execution of arbitrary PHP code and compromise of the application server.
Who is affected by CVE-2007-0115?
CVE-2007-0115 affects all users of Coppermine Photo Gallery version 1.4.10 and earlier with admin access.
Can CVE-2007-0115 be exploited remotely?
Yes, CVE-2007-0115 can be exploited remotely by authenticated administrators.