NetSight
IP …
high7.5Public exploit code

CVE-2004-1989

PHP remote file inclusion vulnerability in theme.php in Coppermine Photo Gallery 1.2.2b allows remote attackers to execute arbitrary PHP code by modifying the …

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

PHP remote file inclusion vulnerability in theme.php in Coppermine Photo Gallery 1.2.2b allows remote attackers to execute arbitrary PHP code by modifying the THEME_DIR parameter to reference a URL on a remote web server that contains user_list_info_box.inc.

Affected products

VendorProductAffected versions
CoppermineCoppermine Photo Gallery
Versions 1.0_rc3, 1.1_.0, 1.1_beta_2, 1.2, 1.2.1, 1.2.2_b
Francisco BurziPhp-Nuke
Versions 6.9, 7.0, 7.0_final, 7.1, 7.2

References