| Package | Affected versions | Patched versions |
|---|---|---|
| coppermine photo gallery | = 1.4.14 |
Coppermine Photo Gallery (CPG) 1.4.14 does not restrict access to update.php, which allows remote attackers to obtain sensitive information such as the database table prefix via a direct request. NOTE: this might be leveraged for attacks against CVE-2008-0504.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free