CVE-2008-1841 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2008-1841
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2008-1841

Description: SQL injection vulnerability in the session handling functionality in bridge/coppermine.inc.php in Coppermine Photo Gallery (CPG) 1.4.17 and earlier allows remote attackers to execute arbitrary SQL commands via an input field associated with the session_id variable, as exploited in the wild in April 2008. NOTE: the fix for CVE-2008-1840 was intended to address this vulnerability, but is actually inapplicable.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/41788 SAID Secunia Advisory: SA29741 CONFIRM http://coppermine.svn.sourceforge.net/viewvc/coppermine/trunk/cpg1.4.x/bridge/coppermine.inc.php?r1=4380&r2=4381 http://coppermine.svn.sourceforge.net/viewvc/coppermine/trunk/cpg1.4.x/bridge/coppermine.inc.php?view=log http://forum.coppermine-gallery.net/index.php/topic,51882.0.html http://sourceforge.net/project/shownotes.php?group_id=89658&release_id=592069 BID 28767

Return to the previous page.