CVE-2007-0836: coppermine coppermine_photo_gallery
Vulnerability summary
CVE-2007-0836 is a medium (CVSS 4.0) vulnerability in coppermine coppermine_photo_gallery. EPSS estimates a 1.84% chance of exploitation in the next 30 days, higher than 78.7% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 08-02-2007PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
admin.php in Coppermine Photo Gallery 1.4.10, and possibly earlier, allows remote authenticated users to include arbitrary local and possibly remote files via the (1) "Path to custom header include" and (2) "Path to custom footer include" form fields. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
1.84%
Chance of exploitation in the next 30 days
Percentile
79%
Versus all other CVEs
30-day change
No change 0.00 pp
From 1.84% on 22-09-2026
Known exploited
Compare KEV catalogsNot in the CISA KEV catalog.
Not in the ENISA CNW catalog.
Not in the CIRCL catalog.
Public exploits
1 foundCoppermine Photo Gallery 1.4.10 - Multiple Local/Remote File Inclusions
Maturity: poc
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Coppermine1 product
- coppermine_photo_gallery≤ 1.4.10
1 vendor · 1 product