PT-2009-2653
CVE-2008-7186
·
تاريخ النشر
2009-09-09
·
تاريخ التحديث
2018-10-11
الوصف من
CVSS 2.0
5.0
متوسطةالمقاييسAV:N/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Coppermine Photo Gallery version 1.4.14
Description
The issue allows remote attackers to obtain sensitive information, such as the database table prefix, by making a direct request to the "update.php" endpoint. This could potentially be used to aid in attacks.
Recommendations
For version 1.4.14, restrict access to the "update.php" endpoint to prevent unauthorized access and information disclosure.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾