Description

Coppermine Photo Gallery (CPG) 1.5.12 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by include/inspekt.php and certain other files.

Remediation

References

CVE-2011-3722

Related Vulnerabilities

Apache Tomcat Other Vulnerability (CVE-2003-0045)

WordPress Plugin Random Banner Cross-Site Scripting (4.1.4)

Frontaccounting Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2009-4037)

WordPress Plugin YouSayToo auto-publishing 'submit' Parameter Cross-Site Scripting (1.0.1)

YOURLS Access of Resource Using Incompatible Type ('Type Confusion') Vulnerability (CVE-2019-14537)

Severity

Medium

Classification

CVE-2011-3722 CWE-200

Tags

Missing Update Known Vulnerabilities