CVE-2012-1614: Infoleak
First published: Tue Sep 04 2012(Updated: )
Coppermine Photo Gallery before 1.5.20 allows remote attackers to obtain sensitive information via (1) a direct request to plugins/visiblehookpoints/index.php, an invalid (2) page or (3) cat parameter to thumbnails.php, an invalid (4) page parameter to usermgr.php, or an invalid (5) newer_than or (6) older_than parameter to search.inc.php, which reveals the installation path in an error message.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Coppermine-gallery Coppermine Photo Gallery | <=1.5.18 | |
| Coppermine-gallery Coppermine Photo Gallery | =1.0 | |
| Coppermine-gallery Coppermine Photo Gallery | =1.0-rc3 | |
| Coppermine-gallery Coppermine Photo Gallery | =1.1 | |
| Coppermine-gallery Coppermine Photo Gallery | =1.1-beta_2 | |
| Coppermine-gallery Coppermine Photo Gallery | =1.1.0 | |
| Coppermine-gallery Coppermine Photo Gallery | =1.2 | |
| Coppermine-gallery Coppermine Photo Gallery | =1.2.0 | |
| Coppermine-gallery Coppermine Photo Gallery | =1.2.0-rc2 | |
| Coppermine-gallery Coppermine Photo Gallery | =1.2.1 | |
| Coppermine-gallery Coppermine Photo Gallery | =1.2.1-b | |
| Coppermine-gallery Coppermine Photo Gallery | =1.2.1-b-nuke | |
| Coppermine-gallery Coppermine Photo Gallery | =1.3.0 | |
| Coppermine-gallery Coppermine Photo Gallery | =1.3.1 | |
| Coppermine-gallery Coppermine Photo Gallery | =1.3.2 | |
| Coppermine-gallery Coppermine Photo Gallery | =1.3.3 | |
| Coppermine-gallery Coppermine Photo Gallery | =1.3.4 | |
| Coppermine-gallery Coppermine Photo Gallery | =1.3.5 | |
| Coppermine-gallery Coppermine Photo Gallery | =1.4 | |
| Coppermine-gallery Coppermine Photo Gallery | =1.4-beta | |
| Coppermine-gallery Coppermine Photo Gallery | =1.4.0 | |
| Coppermine-gallery Coppermine Photo Gallery | =1.4.0-alpha | |
| Coppermine-gallery Coppermine Photo Gallery | =1.4.0-beta | |
| Coppermine-gallery Coppermine Photo Gallery | =1.4.1 | |
| Coppermine-gallery Coppermine Photo Gallery | =1.4.1-beta | |
| Coppermine-gallery Coppermine Photo Gallery | =1.4.2 | |
| Coppermine-gallery Coppermine Photo Gallery | =1.4.3 | |
| Coppermine-gallery Coppermine Photo Gallery | =1.4.4 | |
| Coppermine-gallery Coppermine Photo Gallery | =1.4.5 | |
| Coppermine-gallery Coppermine Photo Gallery | =1.4.6 | |
| Coppermine-gallery Coppermine Photo Gallery | =1.4.7 | |
| Coppermine-gallery Coppermine Photo Gallery | =1.4.8 | |
| Coppermine-gallery Coppermine Photo Gallery | =1.4.9 | |
| Coppermine-gallery Coppermine Photo Gallery | =1.4.10 | |
| Coppermine-gallery Coppermine Photo Gallery | =1.4.11 | |
| Coppermine-gallery Coppermine Photo Gallery | =1.4.12 | |
| Coppermine-gallery Coppermine Photo Gallery | =1.4.13 | |
| Coppermine-gallery Coppermine Photo Gallery | =1.4.14 | |
| Coppermine-gallery Coppermine Photo Gallery | =1.4.15 | |
| Coppermine-gallery Coppermine Photo Gallery | =1.4.16 | |
| Coppermine-gallery Coppermine Photo Gallery | =1.4.17 | |
| Coppermine-gallery Coppermine Photo Gallery | =1.4.18 | |
| Coppermine-gallery Coppermine Photo Gallery | =1.4.19 | |
| Coppermine-gallery Coppermine Photo Gallery | =1.4.20 | |
| Coppermine-gallery Coppermine Photo Gallery | =1.4.21 | |
| Coppermine-gallery Coppermine Photo Gallery | =1.4.22 | |
| Coppermine-gallery Coppermine Photo Gallery | =1.4.23 | |
| Coppermine-gallery Coppermine Photo Gallery | =1.4.24 | |
| Coppermine-gallery Coppermine Photo Gallery | =1.4.25 | |
| Coppermine-gallery Coppermine Photo Gallery | =1.4.26 | |
| Coppermine-gallery Coppermine Photo Gallery | =1.4.27 | |
| Coppermine-gallery Coppermine Photo Gallery | =1.5.1-alpha | |
| Coppermine-gallery Coppermine Photo Gallery | =1.5.2-beta | |
| Coppermine-gallery Coppermine Photo Gallery | =1.5.3-rc | |
| Coppermine-gallery Coppermine Photo Gallery | =1.5.4 | |
| Coppermine-gallery Coppermine Photo Gallery | =1.5.6 | |
| Coppermine-gallery Coppermine Photo Gallery | =1.5.8 | |
| Coppermine-gallery Coppermine Photo Gallery | =1.5.10 | |
| Coppermine-gallery Coppermine Photo Gallery | =1.5.12 | |
| Coppermine-gallery Coppermine Photo Gallery | =1.5.14 | |
| Coppermine-gallery Coppermine Photo Gallery | =1.5.16 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://archives.neohapsis.com/archives/bugtraq/2012-03/0167.html
- http://coppermine.svn.sourceforge.net/viewvc/coppermine/trunk/cpg1.6.x/edit_one_pic.php?r1=8348&r2=8354
- http://forum.coppermine-gallery.net/index.php/topic,74682.0.html
- http://osvdb.org/80732
- http://osvdb.org/80733
- http://osvdb.org/80734
- http://osvdb.org/80735
- http://packetstormsecurity.org/files/111369/Coppermine-1.5.18-Cross-Site-Scripting-Path-Disclosure.html
- http://www.exploit-db.com/exploits/18680
- http://www.openwall.com/lists/oss-security/2012/03/30/5
- http://www.openwall.com/lists/oss-security/2012/03/30/6
- http://www.openwall.com/lists/oss-security/2012/04/03/6
- http://www.securityfocus.com/bid/52818
- http://www.waraxe.us/advisory-81.html
- http://forum.coppermine-gallery.net/index.php/topic%2C74682.0.html
- collector/nvd-index
- agent/references
- agent/severity
- agent/weakness
- agent/author
- agent/description
- agent/type
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/softwarecombine
- agent/tags
- agent/remedy
- collector/mitre-cve
- source/MITRE
- vendor/coppermine-gallery
- canonical/coppermine-gallery coppermine photo gallery
- version/coppermine-gallery coppermine photo gallery/1.5.18
- version/coppermine-gallery coppermine photo gallery/1.0
- version/coppermine-gallery coppermine photo gallery/1.0-rc3
- version/coppermine-gallery coppermine photo gallery/1.1
- version/coppermine-gallery coppermine photo gallery/1.1-beta_2
- version/coppermine-gallery coppermine photo gallery/1.1.0
- version/coppermine-gallery coppermine photo gallery/1.2
- version/coppermine-gallery coppermine photo gallery/1.2.0
- version/coppermine-gallery coppermine photo gallery/1.2.0-rc2
- version/coppermine-gallery coppermine photo gallery/1.2.1
- version/coppermine-gallery coppermine photo gallery/1.2.1-b
- version/coppermine-gallery coppermine photo gallery/1.2.1-b-nuke
- version/coppermine-gallery coppermine photo gallery/1.3.0
- version/coppermine-gallery coppermine photo gallery/1.3.1
- version/coppermine-gallery coppermine photo gallery/1.3.2
- version/coppermine-gallery coppermine photo gallery/1.3.3
- version/coppermine-gallery coppermine photo gallery/1.3.4
- version/coppermine-gallery coppermine photo gallery/1.3.5
- version/coppermine-gallery coppermine photo gallery/1.4
- version/coppermine-gallery coppermine photo gallery/1.4-beta
- version/coppermine-gallery coppermine photo gallery/1.4.0
- version/coppermine-gallery coppermine photo gallery/1.4.0-alpha
- version/coppermine-gallery coppermine photo gallery/1.4.0-beta
- version/coppermine-gallery coppermine photo gallery/1.4.1
- version/coppermine-gallery coppermine photo gallery/1.4.1-beta
- version/coppermine-gallery coppermine photo gallery/1.4.2
- version/coppermine-gallery coppermine photo gallery/1.4.3
- version/coppermine-gallery coppermine photo gallery/1.4.4
- version/coppermine-gallery coppermine photo gallery/1.4.5
- version/coppermine-gallery coppermine photo gallery/1.4.6
- version/coppermine-gallery coppermine photo gallery/1.4.7
- version/coppermine-gallery coppermine photo gallery/1.4.8
- version/coppermine-gallery coppermine photo gallery/1.4.9
- version/coppermine-gallery coppermine photo gallery/1.4.10
- version/coppermine-gallery coppermine photo gallery/1.4.11
- version/coppermine-gallery coppermine photo gallery/1.4.12
- version/coppermine-gallery coppermine photo gallery/1.4.13
- version/coppermine-gallery coppermine photo gallery/1.4.14
- version/coppermine-gallery coppermine photo gallery/1.4.15
- version/coppermine-gallery coppermine photo gallery/1.4.16
- version/coppermine-gallery coppermine photo gallery/1.4.17
- version/coppermine-gallery coppermine photo gallery/1.4.18
- version/coppermine-gallery coppermine photo gallery/1.4.19
- version/coppermine-gallery coppermine photo gallery/1.4.20
- version/coppermine-gallery coppermine photo gallery/1.4.21
- version/coppermine-gallery coppermine photo gallery/1.4.22
- version/coppermine-gallery coppermine photo gallery/1.4.23
- version/coppermine-gallery coppermine photo gallery/1.4.24
- version/coppermine-gallery coppermine photo gallery/1.4.25
- version/coppermine-gallery coppermine photo gallery/1.4.26
- version/coppermine-gallery coppermine photo gallery/1.4.27
- version/coppermine-gallery coppermine photo gallery/1.5.1-alpha
- version/coppermine-gallery coppermine photo gallery/1.5.2-beta
- version/coppermine-gallery coppermine photo gallery/1.5.3-rc
- version/coppermine-gallery coppermine photo gallery/1.5.4
- version/coppermine-gallery coppermine photo gallery/1.5.6
- version/coppermine-gallery coppermine photo gallery/1.5.8
- version/coppermine-gallery coppermine photo gallery/1.5.10
- version/coppermine-gallery coppermine photo gallery/1.5.12
- version/coppermine-gallery coppermine photo gallery/1.5.14
- version/coppermine-gallery coppermine photo gallery/1.5.16