Description
Coppermine Photo Gallery (CPG) 1.4.14 allows remote attackers to obtain sensitive information via a direct request to include/slideshow.inc.php, which leaks the installation path in an error message.
References
- http://www.waraxe.us/advisory-66.html
- 20080131 [waraxe-2008-SA#066] - Multiple Vulnerabilities in Coppermine 1.4.14 mailing-list
- 1019285 vdb-entry
- ADV-2008-0367 vdb-entry