Vulnerability Report

CVE-2012-1614

Title: Coppermine-Gallery Coppermine Photo Gallery Information Disclosure

Information Disclosure

Proof Of Concept

PoC Available for CVE-2012-1614

CWE Category CWE-200
Published Date Sep 04, 2012
Modified Date Jun 16, 2026
Exploit Status Available
Score 5.0 CVSS v2.0
Exploit Probability (EPSS)
8.71%

Vulnerability Summary

CVE-2012-1614: Coppermine Photo Gallery before 1.5.20 allows remote attackers to obtain sensitive information via (1) a direct request to plugins/visiblehookpoints/index.php, an invalid (2) page or (3) cat parameter to thumbnails.php, an invalid (4) page parameter to usermgr.php, or an invalid (5) newer_than or (6) older_than parameter to search.inc.php, which reveals the installation path in an error message.

Impacted Vendors

C
coppermine 1
C
coppermine-gallery 1

Reference Links

http://archives.neohapsis.com/archives/bugtraq/2012-03/0167.html http://coppermine.svn.sourceforge.net/viewvc/coppermine/trunk/cpg1.6.x/edit_one_pic.php?r1=8348&r2=8354 http://forum.coppermine-gallery.net/index.php/topic%2C74682.0.html http://osvdb.org/80732 http://osvdb.org/80733 http://osvdb.org/80734 http://osvdb.org/80735 http://packetstormsecurity.org/files/111369/Coppermine-1.5.18-Cross-Site-Scripting-Path-Disclosure.html http://www.exploit-db.com/exploits/18680 http://www.openwall.com/lists/oss-security/2012/03/30/5 http://www.openwall.com/lists/oss-security/2012/03/30/6 http://www.openwall.com/lists/oss-security/2012/04/03/6 http://www.securityfocus.com/bid/52818 http://www.waraxe.us/advisory-81.html http://archives.neohapsis.com/archives/bugtraq/2012-03/0167.html http://coppermine.svn.sourceforge.net/viewvc/coppermine/trunk/cpg1.6.x/edit_one_pic.php?r1=8348&r2=8354 http://forum.coppermine-gallery.net/index.php/topic%2C74682.0.html http://osvdb.org/80732 http://osvdb.org/80733 http://osvdb.org/80734 http://osvdb.org/80735 http://packetstormsecurity.org/files/111369/Coppermine-1.5.18-Cross-Site-Scripting-Path-Disclosure.html http://www.exploit-db.com/exploits/18680 http://www.openwall.com/lists/oss-security/2012/03/30/5 http://www.openwall.com/lists/oss-security/2012/03/30/6 http://www.openwall.com/lists/oss-security/2012/04/03/6 http://www.securityfocus.com/bid/52818 http://www.waraxe.us/advisory-81.html
CVSS v2.0
Source Entity [email protected]
Severity MEDIUM
5.0
Access Vector
N/A
Authentication
N/A
RAW VECTOR AV:N/AC:L/Au:N/C:P/I:N/A:N

Associated Attack Patterns (CAPEC)

Total: Patterns

CVE-2012-1614 Exploits & PoCs (Proof Of Concept)

Exploit-DB https://www.exploit-db.com/exploits/18680
View Code
MODIFIED

Vulnerability data updated via NVD.

MODIFIED

Vulnerability data updated via NVD.

MODIFIED

Vulnerability data or affected products updated.

PUBLISHED

Vulnerability first announced in NVD.

Attack Vector Matrix

Access Vector N/A
Complexity N/A
Privileges N/A
Interaction NONE
CVSS Vector String AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected Stack

No specific products linked.