Description
Multiple PHP remote file inclusion vulnerabilities in Coppermine Photo Gallery (CPG) allow remote attackers to execute arbitrary PHP code via a URL in the (1) cmd parameter to (a) image_processor.php or (b) picmgmt.inc.php, or the (2) path parameter to (c) include/functions.php, (d) include/plugin_api.inc.php, (e) index.php, or (f) pluginmgr.php.
References
- 2416 third-party-advisory
- 35068 vdb-entry
- 35065 vdb-entry
- 35067 vdb-entry
- 20070309 Remote File Include In Script Coppermine Photo Gallery mailing-list
- 22896 vdb-entry
- 35069 vdb-entry
- coppermine-multiple-scripts-file-include(32894) vdb-entry
- 35066 vdb-entry
- 20070322 Remote File Include In Coppermine Photo Gallery mailing-list
- 35070 vdb-entry