Vulnerability Details CVE-2006-2514
Coppermine galleries before 1.4.6, when running on Apache with mod_mime installed, allows remote attackers to upload arbitrary files via a filename with multiple file extensions.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.007
EPSS Ranking 71.9%
CVSS Severity
CVSS v2 Score 7.5
References
- http://secunia.com/advisories/20211
- http://sourceforge.net/project/shownotes.php?group_id=89658&release_id=418266
- http://www.vupen.com/english/advisories/2006/1892
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26588
- http://secunia.com/advisories/20211
- http://sourceforge.net/project/shownotes.php?group_id=89658&release_id=418266
- http://www.vupen.com/english/advisories/2006/1892
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26588
Products affected by CVE-2006-2514
-
cpe:2.3:a:coppermine:coppermine_photo_gallery:*
-
cpe:2.3:a:coppermine:coppermine_photo_gallery:1.0_rc3
-
cpe:2.3:a:coppermine:coppermine_photo_gallery:1.1.0
-
cpe:2.3:a:coppermine:coppermine_photo_gallery:1.1_beta_2
-
cpe:2.3:a:coppermine:coppermine_photo_gallery:1.2
-
cpe:2.3:a:coppermine:coppermine_photo_gallery:1.2.1
-
cpe:2.3:a:coppermine:coppermine_photo_gallery:1.2.2_b
-
cpe:2.3:a:coppermine:coppermine_photo_gallery:1.3
-
cpe:2.3:a:coppermine:coppermine_photo_gallery:1.3.2
-
cpe:2.3:a:coppermine:coppermine_photo_gallery:1.3.3
-
cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4.2
-
cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4.3
-
cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4.4
-
cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4_beta