Coppermine Photo Gallery up to 1.5.35 mode.php referer redirect

Summaryinfo

A vulnerability, which was classified as problematic, has been found in Coppermine Photo Gallery up to 1.5.35. This vulnerability affects unknown code of the file mode.php. Performing a manipulation of the argument referer results in redirect. This vulnerability was named CVE-2015-3922. In addition, an exploit is available. It is advisable to upgrade the affected component.

Detailsinfo

A vulnerability classified as critical has been found in Coppermine Photo Gallery up to 1.5.35 (Photo Gallery Software). This affects an unknown functionality of the file mode.php. The manipulation of the argument referer with an unknown input leads to a redirect vulnerability. CWE is classifying the issue as CWE-601. A web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a Redirect. This simplifies phishing attacks. This is going to have an impact on confidentiality, integrity, and availability. The summary by CVE is:

Open redirect vulnerability in mode.php in Coppermine Photo Gallery before 1.5.36 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the referer parameter.

The weakness was presented 05/27/2015 by Mahendra (Website). The advisory is shared at packetstormsecurity.com. This vulnerability is uniquely identified as CVE-2015-3922 since 05/12/2015. It is possible to initiate the attack remotely. No form of authentication is needed for exploitation. Technical details and a public exploit are known. MITRE ATT&CK project uses the attack technique T1204.001 for this issue.

The exploit is shared for download at packetstormsecurity.com. It is declared as proof-of-concept. By approaching the search of inurl:mode.php it is possible to find vulnerable targets with Google Hacking.

Upgrading to version 1.5.36 eliminates this vulnerability.

The vulnerability is also documented in the vulnerability database at SecurityFocus (BID 74869†). See VDB-75572 and VDB-75831 for similar entries. If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Type

• Photo Gallery Software

Vendor

• Coppermine

Name

• Photo Gallery

Version

• 1.5.0
• 1.5.1
• 1.5.2
• 1.5.3
• 1.5.4
• 1.5.5
• 1.5.6
• 1.5.7
• 1.5.8
• 1.5.9
• 1.5.10
• 1.5.11
• 1.5.12
• 1.5.13
• 1.5.14
• 1.5.15
• 1.5.16
• 1.5.17
• 1.5.18
• 1.5.19
• 1.5.20
• 1.5.21
• 1.5.22
• 1.5.23
• 1.5.24
• 1.5.25
• 1.5.26
• 1.5.27
• 1.5.28
• 1.5.29
• 1.5.30
• 1.5.31
• 1.5.32
• 1.5.33
• 1.5.34
• 1.5.35

License

• open-source

Website

• Vendor: https://coppermine-gallery.net/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion