Description

themes/sample/theme.php in Coppermine Photo Gallery (CPG) 1.4.18 and earlier allows remote attackers to obtain sensitive information via a direct request, which reveals the installation path in an error message.

Remediation

References

CVE-2008-3481

Related Vulnerabilities

Drupal Core 9.3.x Multiple Vulnerabilities (9.3.0 - 9.3.7)

WordPress Plugin Chained Quiz Cross-Site Scripting (1.1.9)

Oracle Database Server Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2007-5507)

WordPress Plugin Export any WordPress data to XML/CSV Cross-Site Scripting (1.3.5)

MySQL CVE-2020-14632 Vulnerability (CVE-2020-14632)

Severity

High

Classification

CVE-2008-3481 CWE-94

Tags

Missing Update Known Vulnerabilities