Coppermine Permissions Privileges and Access Controls Vulnerability - CVE-2008-7186 - Vulnerability Database

Coppermine Permissions Privileges and Access Controls Vulnerability - CVE-2008-7186

Medium
Reference: CVE-2008-7186
Title: Coppermine Permissions Privileges and Access Controls Vulnerability
Overview:

Coppermine Photo Gallery (CPG) 1.4.14 does not restrict access to update.php which allows remote attackers to obtain sensitive information such as the database table prefix via a direct request. NOTE: this might be leveraged for attacks against CVE-2008-0504.