CVE-2004-1984 in Photo Gallery

Summary

Coppermine Photo Gallery 1.2.2b and 1.2.0 RC4 allows remote attackers to obtain sensitive information via a direct HTTP request to (1) phpinfo.php, (2) addpic.php, (3) config.php, (4) db_input.php, (5) displayecard.php, (6) ecard.php, (7) crop.inc.php, which reveal the full path in a PHP error message.

Be aware that VulDB is the high quality source for vulnerability data.

• Reservation: 05/04/2005
• Disclosure: 05/02/2004
• Moderation: VulDB entry created
• Entries: VDB-21812 (1)
• CPE: ready
• CWE: CWE-200 (Confirmed)
• CVSS: 5.3
• EPSS: 0.00550
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2004-1984
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2004-1984
• CVE Details: https://www.cvedetails.com/cve/CVE-2004-1984/