exploitDog

CVE-2007-4976

Опубликовано: 19 сент. 2007

Источник: nvd

CVSS2: 6.5

EPSS Средний

Описание

Directory traversal vulnerability in viewlog.php in Coppermine Photo Gallery (CPG) 1.4.12 and earlier allows remote authenticated administrators to include and execute arbitrary local files via a .. (dot dot) in the log parameter.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4:*:*:*:*:*:*:*

cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4.2:*:*:*:*:*:*:*

cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4.4:*:*:*:*:*:*:*

cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4.9:*:*:*:*:*:*:*

cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4.10:*:*:*:*:*:*:*

cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4.11:*:*:*:*:*:*:*

cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4.12:*:*:*:*:*:*:*

EPSS

Процентиль: 95%

0.16699

Средний

6.5 Medium

CVSS2

Дефекты

CWE-22

Связанные уязвимости

GHSA-vx7f-xx2w-qxj7

github

почти 4 года назад

Directory traversal vulnerability in viewlog.php in Coppermine Photo Gallery (CPG) 1.4.12 and earlier allows remote authenticated administrators to include and execute arbitrary local files via a .. (dot dot) in the log parameter.

EPSS

Процентиль: 95%

0.16699

Средний

6.5 Medium

CVSS2

Дефекты

CWE-22