|
Vulnerability Assessment & Network Security Forums |
|||||||||
If through a vulnerability assessment, a network security issue is detected for the vulnerability below, applying the appropriate security patches in a timely matter is very important. If you have detected that your system has already been compromised, following CERT's Network Security recovery document will assist with recommended steps for system recovery. Home >> Browse Vulnerability Assessment Database >> CGI abuses >> Coppermine Photo Gallery file Parameter Local File Include Vulnerability Vulnerability Assessment Details
|
Coppermine Photo Gallery file Parameter Local File Include Vulnerability |
||
Tries to read a local file using Coppermine Photo Gallery Detailed Explanation for this Vulnerability Assessment Summary : The remote web server contains a PHP script that is affected by a local file include issue. Description : The version of Coppermine Gallery installed on the remote host fails to properly sanitize input to the 'file' parameter of the 'index.php' script before using it in a PHP 'include_once()' function. Provided PHP's 'register_globals' setting is enabled, an unauthenticated attacker may be able to exploit this issue to view arbitrary files or to execute arbitrary PHP code on the remote host, subject to the rights of the web server user id. See also : http://www.securityfocus.com/archive/1/431062/30/0/threaded http://coppermine-gallery.net/forum/index.php?topic=30655.0 Solution : Upgrade to Coppermine version 1.4.5 or later. Network Security Threat Level: Low / CVSS Base Score : 2.3 (AV:R/AC:L/Au:NR/C:P/I:N/A:N/B:N) Networks Security ID: 17570 Vulnerability Assessment Copyright: This script is Copyright (C) 2006 Tenable Network Security |
||
Cables, Connectors |
Vintage P51430TX TITANIUM I B+
$99.00
vintage floppy disk storage container
$11.69
VINTAGE 83X9648, EC A50187, COAXIAL CARD MICROCHANNEL
$80.00
Vintage Apple Lisa Brochure, very nice condition
$50.00
Vintage Computer Mouse - Todays Mouse - Windows 95 P S/2
$9.99
Vintage Compaq 141649-004 2 Button PS/2 Gray Mouse M-S34 - FAST SHIPPING - NEW
$8.99
Vintage Sensomotoric Instruments Computer Keyboard
$30.00
Vintage Apple Speakers for iMac Power Mac G4 Accessory Lot -O2
$11.99
SEALED Vintage Western Digital Value Line Hard Drive 3.5-Inch Enhanced IDE 25 GB
$100.00
Vintage Compaq Presario Mouse, Model MUS9J, PS/2 - Tested & Working, Very Good
$12.99
|
||
No Discussions have been posted on this vulnerability. |