6

CVE-2007-0115

Exploit
Static code injection vulnerability in Coppermine Photo Gallery 1.4.10 and earlier allows remote authenticated administrators to execute arbitrary PHP code via the Username to login.php, which is injected into an error message in security.log.php, which can then be accessed using viewlog.php.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Coppermine ≫ Coppermine Photo Gallery Version <= 1.4.10
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.09% 0.609
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6 6.8 6.4
AV:N/AC:M/Au:S/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://acid-root.new.fr/poc/19070104.txt
Exploit
http://osvdb.org/33383
http://securityreason.com/securityalert/2107
http://www.attrition.org/pipermail/vim/2007-January/001218.html
Exploit
http://www.securityfocus.com/archive/1/456051/100/0/threaded