CVE-2007-0836: Medium severity Coppermine Coppermine Photo Gallery vulnerability
admin.php in Coppermine Photo Gallery 1.4.10, and possibly earlier, allows remote authenticated users to include arbitrary local and possibly remote files via the (1) "Path to custom header include" and (2) "Path to custom footer include" form fields. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-0836?
CVE-2007-0836 is considered a high severity vulnerability due to its potential for remote file inclusion by authenticated users.
How do I fix CVE-2007-0836?
To fix CVE-2007-0836, update Coppermine Photo Gallery to version 1.4.11 or later to mitigate the vulnerability.
Who is affected by CVE-2007-0836?
CVE-2007-0836 affects Coppermine Photo Gallery versions 1.4.10 and earlier installations.
What type of vulnerability is CVE-2007-0836?
CVE-2007-0836 is a remote file inclusion vulnerability that allows authenticated users to include arbitrary files.
What can attackers do with CVE-2007-0836?
Attackers exploiting CVE-2007-0836 can potentially execute malicious code on the server by including unauthorized files.