CVE-2008-7186: coppermine-gallery coppermine_photo_gallery
Vulnerability summary
CVE-2008-7186 is a medium (CVSS 5.0) vulnerability in coppermine-gallery coppermine_photo_gallery. EPSS estimates a 1.34% chance of exploitation in the next 30 days, higher than 71% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 09-09-2009PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
Coppermine Photo Gallery (CPG) 1.4.14 does not restrict access to update.php, which allows remote attackers to obtain sensitive information such as the database table prefix via a direct request. NOTE: this might be leveraged for attacks against CVE-2008-0504.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
1.34%
Chance of exploitation in the next 30 days
Percentile
71%
Versus all other CVEs
30-day change
No change 0.00 pp
From 1.34% on 22-09-2026
Known exploited
Compare KEV catalogsNot in the CISA KEV catalog.
Not in the ENISA CNW catalog.
Not in the CIRCL catalog.
Public exploits
1 foundExploit Reference (waraxe.us)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Coppermine-gallery1 product
- coppermine_photo_gallery1.4.14
1 vendor · 1 product