CVE-2008-7186: Medium severity coppermine gallery vulnerability

Published Sep 9, 2009

Updated

Coppermine Photo Gallery (CPG) 1.4.14 does not restrict access to update.php, which allows remote attackers to obtain sensitive information such as the database table prefix via a direct request. NOTE: this might be leveraged for attacks against CVE-2008-0504.

Affected Software

1 affected component

Coppermine-gallery Coppermine Photo Gallery=1.4.14

Remediation

Patch Available

http://www.vupen.com/english/advisories/2008/0367

Event History

Sep 9, 2009

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-7186?

CVE-2008-7186 is considered a medium severity vulnerability due to its potential to expose sensitive information.

How do I fix CVE-2008-7186?

To mitigate CVE-2008-7186, restrict access to update.php by implementing access control measures.

What software is affected by CVE-2008-7186?

CVE-2008-7186 specifically affects Coppermine Photo Gallery version 1.4.14.

What type of information can be leaked due to CVE-2008-7186?

CVE-2008-7186 allows attackers to obtain sensitive information such as the database table prefix.

What is the impact of CVE-2008-7186 on system security?

CVE-2008-7186 can lead to further attacks, especially in conjunction with other vulnerabilities like CVE-2008-0504.