NetSight
high7.5Public exploit code

CVE-2008-3481

themes/sample/theme.php in Coppermine Photo Gallery (CPG) 1.4.18 and earlier allows remote attackers to obtain sensitive information via a direct request, whic…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

themes/sample/theme.php in Coppermine Photo Gallery (CPG) 1.4.18 and earlier allows remote attackers to obtain sensitive information via a direct request, which reveals the installation path in an error message.

Affected products

VendorProductAffected versions
Coppermine-GalleryCoppermine Photo Gallery
through 1.4.18
Versions 1.0, 1.1, 1.1.0, 1.2.0, 1.2.1

Weakness classification

References