CVE-2007-0115

Published: Jan 9, 2007Modified: Apr 23, 2026

6.0

Vector

AV:N/AC:M/Au:S/C:P/I:P/A:P

Exploitability: 6.8 / Impact: 6.4

Source: NVD

Description

Static code injection vulnerability in Coppermine Photo Gallery 1.4.10 and earlier allows remote authenticated administrators to execute arbitrary PHP code via the Username to login.php, which is injected into an error message in security.log.php, which can then be accessed using viewlog.php.

Affected (1)

Products: Coppermine: Coppermine Photo Gallery

1 product

Coppermine Photo Gallery

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Coppermine Coppermine Photo Gallery	Up to 1.4.10

References (10)

http://acid-root.new.fr/poc/19070104.txt

Source: cve@mitre.org

Exploit

http://osvdb.org/33383

Source: cve@mitre.org

http://securityreason.com/securityalert/2107

Source: cve@mitre.org

http://www.attrition.org/pipermail/vim/2007-January/001218.html

Source: cve@mitre.org

Exploit

http://www.securityfocus.com/archive/1/456051/100/0/threaded

Source: cve@mitre.org

http://acid-root.new.fr/poc/19070104.txt

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://osvdb.org/33383

Source: af854a3a-2127-422b-91ae-364da2661108

http://securityreason.com/securityalert/2107

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.attrition.org/pipermail/vim/2007-January/001218.html

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://www.securityfocus.com/archive/1/456051/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.