Description

Directory traversal vulnerability in the user_get_profile function in include/functions.inc.php in Coppermine Photo Gallery (CPG) 1.4.18 and earlier, when the charset is utf-8, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang part of serialized data in an _data cookie.

Remediation

References

CVE-2008-3486

Related Vulnerabilities

WordPress Plugin NEX-Forms-Ultimate Form builder Multiple SQL Injection Vulnerabilities (4.0)

WordPress Plugin Ultimate Member-User Profile, Registration, Login, Member Directory, Content Restriction & Membership Security Bypass (1.3.52)

WordPress Plugin Cherry Cross-Site Scripting (1.2.8.1)

Plone CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-7136)

WordPress 4.0.x Multiple Vulnerabilities (4.0 - 4.0.22)

Severity

High

Classification

CVE-2008-3486 CWE-22

Tags

Missing Update Known Vulnerabilities