| Package | Affected versions | Patched versions |
|---|---|---|
| coppermine photo gallery | = 1.0= 1.1= 1.1.0= 1.2= 1.2.0= 1.2.1= 1.3.0= 1.3.1= 1.3.2= 1.3.3= 1.3.4= 1.3.5= 1.4= 1.4.0= 1.4.1= 1.4.10= 1.4.11= 1.4.12= 1.4.13= 1.4.14= 1.4.15= 1.4.16= 1.4.17= 1.4.18= 1.4.19= 1.4.2= 1.4.20= 1.4.21= 1.4.22= 1.4.23= 1.4.24= 1.4.25= 1.4.26= 1.4.27= 1.4.3= 1.4.4= 1.4.5= 1.4.6= 1.4.7= 1.4.8= 1.4.9= 1.5.1= 1.5.10= 1.5.12= 1.5.14= 1.5.16= 1.5.2= 1.5.3= 1.5.4= 1.5.6= 1.5.8≤ 1.5.18 |
Coppermine Photo Gallery before 1.5.20 allows remote attackers to obtain sensitive information via (1) a direct request to plugins/visiblehookpoints/index.php, an invalid (2) page or (3) cat parameter to thumbnails.php, an invalid (4) page parameter to usermgr.php, or an invalid (5) newer_than or (6) older_than parameter to search.inc.php, which reveals the installation path in an error message.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free