Description
Coppermine Photo Gallery before 1.5.20 allows remote attackers to obtain sensitive information via (1) a direct request to plugins/visiblehookpoints/index.php, an invalid (2) page or (3) cat parameter to thumbnails.php, an invalid (4) page parameter to usermgr.php, or an invalid (5) newer_than or (6) older_than parameter to search.inc.php, which reveals the installation path in an error message.
Remediation
References
Related Vulnerabilities
Dolibarr Incorrect Default Permissions Vulnerability (CVE-2022-40871)
WordPress Plugin Random Banner Cross-Site Scripting (1.1.2.1)
Ruby Resource Management Errors Vulnerability (CVE-2014-6438)
MySQL CVE-2016-5635 Vulnerability (CVE-2016-5635)
WordPress Plugin Youtube Channel Gallery Cross-Site Scripting (2.4)