CVE-2007-1414: Critical severity Coppermine Coppermine Photo Gallery vulnerability

Published Mar 12, 2007

Updated

Multiple PHP remote file inclusion vulnerabilities in Coppermine Photo Gallery (CPG) allow remote attackers to execute arbitrary PHP code via a URL in the (1) cmd parameter to (a) imageprocessor.php or (b) picmgmt.inc.php, or the (2) path parameter to (c) include/functions.php, (d) include/pluginapi.inc.php, (e) index.php, or (f) pluginmgr.php.

Affected Software

1 affected component

Coppermine Coppermine Photo Gallery

Event History

Mar 12, 2007

CVE Published

11:19 PM

Mar 13, 2007

CVE Published

via MITRE·03:00 AM

Data Sourced

via MITRE·03:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2007-1414?

CVE-2007-1414 has a CVSS score indicating it is a high-severity vulnerability that allows remote code execution.

How do I fix CVE-2007-1414?

To fix CVE-2007-1414, update to the latest version of Coppermine Photo Gallery that addresses these vulnerabilities.

What are the main vulnerabilities associated with CVE-2007-1414?

CVE-2007-1414 includes multiple PHP remote file inclusion vulnerabilities affecting certain parameters in Coppermine Photo Gallery.

Who is affected by CVE-2007-1414?

CVE-2007-1414 affects users running specific versions of Coppermine Photo Gallery that have not been patched against PHP remote file inclusion.

What can attackers do with CVE-2007-1414?

Attackers exploiting CVE-2007-1414 can execute arbitrary PHP code on the affected server by using crafted URL parameters.