Description

Coppermine Photo Gallery (CPG) 1.5.12 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by include/inspekt.php and certain other files.

Remediation

References

CVE-2011-3722

Related Vulnerabilities

PostgreSQL Improper Control of Dynamically-Managed Code Resources Vulnerability (CVE-2022-2625)

Oracle Database Server CVE-2020-2731 Vulnerability (CVE-2020-2731)

ProjectSend Improper Neutralization of Formula Elements in a CSV File Vulnerability (CVE-2018-7201)

Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-25603)

WordPress Plugin PowerPack Lite for Beaver Builder Cross-Site Scripting (1.3.0)

Severity

Medium

Classification

CVE-2011-3722 CWE-200

Tags

Missing Update Known Vulnerabilities