Coppermine Photo Gallery is prone to multiple remote command-execution vulnerabilities because the application fails to adequately sanitize user-supplied input.
Successful attacks can compromise the affected application and the underlying server.
Coppermine Photo Gallery 1.5.12 is vulnerable; other versions may also be affected.
An attacker can exploit these issues using a browser.
The following example URIs are available:
http://www.example.com/cpg.1.5.12/include/picmgmt.inc.php?output=[command]
http://www.example.com/cpg.1.5.12/include/picmgmt.inc.php?retva=[command]
No hay comentarios.:
Publicar un comentario
Déjanos tu comentario, nos permitirá mejorar.
¿Qué opinas de este tema?
¿Tienes alguna duda o sugerencia?
¿Te parece adecuado y completo este tema?
¿Falta información? ¿Cual?