NetSight
IP …
high7.5Public exploit code

CVE-2004-1988

PHP remote file inclusion vulnerability in init.inc.php in Coppermine Photo Gallery 1.2.0 RC4 allows remote attackers to execute arbitrary PHP code by modifyin…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

PHP remote file inclusion vulnerability in init.inc.php in Coppermine Photo Gallery 1.2.0 RC4 allows remote attackers to execute arbitrary PHP code by modifying the CPG_M_DIR to reference a URL on a remote web server that contains functions.inc.php.

Affected products

VendorProductAffected versions
CoppermineCoppermine Photo Gallery
Versions 1.0_rc3, 1.1_.0, 1.1_beta_2, 1.2, 1.2.1, 1.2.2_b
Francisco BurziPhp-Nuke
Versions 6.9, 7.0, 7.0_final, 7.1, 7.2

References