Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Directory traversal vulnerability in the user_get_profile function in include/functions.inc.php in Coppermine Photo Gallery (CPG) 1.4.18 and earlier, when the charset is utf-8, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang part of serialized data in an _data cookie.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Coppermine PhotoGallery user_get_profile() 文件引用漏洞
Vulnerability Description
Coppermine Photo Gallery是用PHP编写的多用途集成Web图形库脚本。 Photo Gallery1.4.18版本中include/functions.inc.php的user_get_profile存在远程文件引用漏洞。当采用UTF-8编码时，远程攻击者可通过在在data cookie中编码的lang部分采用".."的方式引用及执行本地任意文件。
CVSS Information
N/A
Vulnerability Type
N/A