CVE-2012-1614: Infoleak
Published Sep 4, 2012
·Updated
Coppermine Photo Gallery before 1.5.20 allows remote attackers to obtain sensitive information via (1) a direct request to plugins/visiblehookpoints/index.php, an invalid (2) page or (3) cat parameter to thumbnails.php, an invalid (4) page parameter to usermgr.php, or an invalid (5) newerthan or (6) olderthan parameter to search.inc.php, which reveals the installation path in an error message.
Affected Software
61 affected components
Coppermine-gallery Coppermine Photo Gallery<=1.5.18
Coppermine-gallery Coppermine Photo Gallery=1.0
Coppermine-gallery Coppermine Photo Gallery=1.0-rc3
Coppermine-gallery Coppermine Photo Gallery=1.1
Coppermine-gallery Coppermine Photo Gallery=1.1-beta_2
Coppermine-gallery Coppermine Photo Gallery=1.1.0
Coppermine-gallery Coppermine Photo Gallery=1.2
Coppermine-gallery Coppermine Photo Gallery=1.2.0
Coppermine-gallery Coppermine Photo Gallery=1.2.0-rc2
Coppermine-gallery Coppermine Photo Gallery=1.2.1
Coppermine-gallery Coppermine Photo Gallery=1.2.1-b
Coppermine-gallery Coppermine Photo Gallery=1.2.1-b-nuke
Coppermine-gallery Coppermine Photo Gallery=1.3.0
Coppermine-gallery Coppermine Photo Gallery=1.3.1
Coppermine-gallery Coppermine Photo Gallery=1.3.2
Coppermine-gallery Coppermine Photo Gallery=1.3.3
Coppermine-gallery Coppermine Photo Gallery=1.3.4
Coppermine-gallery Coppermine Photo Gallery=1.3.5
Coppermine-gallery Coppermine Photo Gallery=1.4
Coppermine-gallery Coppermine Photo Gallery=1.4-beta
Coppermine-gallery Coppermine Photo Gallery=1.4.0
Coppermine-gallery Coppermine Photo Gallery=1.4.0-alpha
Coppermine-gallery Coppermine Photo Gallery=1.4.0-beta
Coppermine-gallery Coppermine Photo Gallery=1.4.1
Coppermine-gallery Coppermine Photo Gallery=1.4.1-beta
Coppermine-gallery Coppermine Photo Gallery=1.4.2
Coppermine-gallery Coppermine Photo Gallery=1.4.3
Coppermine-gallery Coppermine Photo Gallery=1.4.4
Coppermine-gallery Coppermine Photo Gallery=1.4.5
Coppermine-gallery Coppermine Photo Gallery=1.4.6
Coppermine-gallery Coppermine Photo Gallery=1.4.7
Coppermine-gallery Coppermine Photo Gallery=1.4.8
Coppermine-gallery Coppermine Photo Gallery=1.4.9
Coppermine-gallery Coppermine Photo Gallery=1.4.10
Coppermine-gallery Coppermine Photo Gallery=1.4.11
Coppermine-gallery Coppermine Photo Gallery=1.4.12
Coppermine-gallery Coppermine Photo Gallery=1.4.13
Coppermine-gallery Coppermine Photo Gallery=1.4.14
Coppermine-gallery Coppermine Photo Gallery=1.4.15
Coppermine-gallery Coppermine Photo Gallery=1.4.16
Coppermine-gallery Coppermine Photo Gallery=1.4.17
Coppermine-gallery Coppermine Photo Gallery=1.4.18
Coppermine-gallery Coppermine Photo Gallery=1.4.19
Coppermine-gallery Coppermine Photo Gallery=1.4.20
Coppermine-gallery Coppermine Photo Gallery=1.4.21
Coppermine-gallery Coppermine Photo Gallery=1.4.22
Coppermine-gallery Coppermine Photo Gallery=1.4.23
Coppermine-gallery Coppermine Photo Gallery=1.4.24
Coppermine-gallery Coppermine Photo Gallery=1.4.25
Coppermine-gallery Coppermine Photo Gallery=1.4.26
Coppermine-gallery Coppermine Photo Gallery=1.4.27
Coppermine-gallery Coppermine Photo Gallery=1.5.1-alpha
Coppermine-gallery Coppermine Photo Gallery=1.5.2-beta
Coppermine-gallery Coppermine Photo Gallery=1.5.3-rc
Coppermine-gallery Coppermine Photo Gallery=1.5.4
Coppermine-gallery Coppermine Photo Gallery=1.5.6
Coppermine-gallery Coppermine Photo Gallery=1.5.8
Coppermine-gallery Coppermine Photo Gallery=1.5.10
Coppermine-gallery Coppermine Photo Gallery=1.5.12
Coppermine-gallery Coppermine Photo Gallery=1.5.14
Coppermine-gallery Coppermine Photo Gallery=1.5.16
Remediation
Event History
Sep 4, 2012
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-1614?
CVE-2012-1614 is considered a medium severity vulnerability that allows remote attackers to obtain sensitive information.
2
How do I fix CVE-2012-1614?
To fix CVE-2012-1614, update Coppermine Photo Gallery to version 1.5.20 or later.
3
What software versions are affected by CVE-2012-1614?
CVE-2012-1614 affects Coppermine Photo Gallery versions prior to 1.5.20.
4
What information can be exposed due to CVE-2012-1614?
CVE-2012-1614 can expose sensitive information through specific direct requests and invalid parameters.
5
Is CVE-2012-1614 a local or remote vulnerability?
CVE-2012-1614 is a remote vulnerability, allowing attackers to exploit it over the internet.