← Database

CVE-2008-7186

MEDIUM CVSS: 5.0 Published: 2009-09-09 Modified: 2026-06-16

Description

Coppermine Photo Gallery (CPG) 1.4.14 does not restrict access to update.php, which allows remote attackers to obtain sensitive information such as the database table prefix via a direct request. NOTE: this might be leveraged for attacks against CVE-2008-0504.

Affected Platforms

Coppermine-Gallery Coppermine Photo Gallery

Weakness Type

CWE-264

References