Description
Coppermine Photo Gallery in versions 1.6.09 through 1.6.27 is vulnerable to path traversal. Unauthenticated remote attacker is able to exploit a vulnerable endpoint and construct payloads that allow to read content of any file accessible by the the web server process.This issue was fixed in version 1.6.28.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Coppermine Photo Gallery | Coppermine Photo Gallery | 1.6.09 – < 1.6.28 | 1.6.28 |