CVE-2007-4976: Path Traversal
Published Sep 19, 2007
·Updated
Directory traversal vulnerability in viewlog.php in Coppermine Photo Gallery (CPG) 1.4.12 and earlier allows remote authenticated administrators to include and execute arbitrary local files via a .. (dot dot) in the log parameter.
Affected Software
7 affected components
Coppermine Coppermine Photo Gallery=1.4
Coppermine Coppermine Photo Gallery=1.4.2
Coppermine Coppermine Photo Gallery=1.4.4
Coppermine Coppermine Photo Gallery=1.4.9
Coppermine Coppermine Photo Gallery=1.4.10
Coppermine Coppermine Photo Gallery=1.4.11
Coppermine Coppermine Photo Gallery=1.4.12
Remediation
Patch Available
Patch Available
Patch Available
Event History
Sep 19, 2007
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-4976?
CVE-2007-4976 has a medium severity rating due to its potential impact on application security.
2
How do I fix CVE-2007-4976?
To fix CVE-2007-4976, upgrade to a patched version of Coppermine Photo Gallery beyond 1.4.12.
3
Who is affected by CVE-2007-4976?
CVE-2007-4976 affects authenticated administrators using Coppermine Photo Gallery version 1.4.12 and earlier.
4
What type of vulnerability is CVE-2007-4976?
CVE-2007-4976 is a directory traversal vulnerability that allows arbitrary file inclusion.
5
Can unprivileged users exploit CVE-2007-4976?
No, CVE-2007-4976 requires remote authenticated administrator access to be exploited.