Description
Coppermine Photo Gallery (CPG) 1.4.14 does not restrict access to update.php, which allows remote attackers to obtain sensitive information such as the database table prefix via a direct request. NOTE: this might be leveraged for attacks against CVE-2008-0504.
Remediation
References
Related Vulnerabilities
WordPress Plugin Canto Multiple Server-Side Request Forgery Vulnerabilities (1.7.0)
LimeSurvey Deserialization of Untrusted Data Vulnerability (CVE-2025-56422)
WordPress Plugin Tinymce Thumbnail Gallery 'href' Parameter Information Disclosure (1.0.7)
WordPress Plugin WP Reset-Most Advanced WordPress Reset Tool Cross-Site Scripting (1.86)