[KAPDA]CopperminePhotoGallery1.4.4~ PluginInclusionSystem(index.php)~ RemoteFileInclusion attack

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: [KAPDA]CopperminePhotoGallery1.4.4~ PluginInclusionSystem(index.php)~ RemoteFileInclusion attack
From: addmimistrator@xxxxxxxxx
Date: 15 Apr 2006 05:26:11 -0000
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm

ORIGINAL ADVISORY:
http://myimei.com/security/2006-04-14/copperminephotogallery144-plugininclusionsystemindexphp-remotefileinclusion-attack.html
??????-Summary?????-
Software: CPG Coppermine Photo Gallery
Sowtware?s Web Site: http://coppermine.sourceforge.net/
Versions: 1.4.4.stable
Class: Remote
Status: Unpatched
Exploit: Available
Solution: Available
Discovered by: imei addmimistrator
Risk Level: High

SEE ORIGINAL ADV FOR MORE INFO!

Follow-Ups:
- Re: [KAPDA]CopperminePhotoGallery1.4.4~ PluginInclusionSystem(index.php)~ RemoteFileInclusion attack
  - From: Dariusz Kolasinski

Prev by Date: [KAPDA]MyBB1.1.0~global.php~ParameterExtracting
Next by Date: Re: Firefox 1.5.0.1 Password Manager Arbtirary User Browsing History Disclosure
Previous by thread: [KAPDA]MyBB1.1.0~global.php~ParameterExtracting
Next by thread: Re: [KAPDA]CopperminePhotoGallery1.4.4~ PluginInclusionSystem(index.php)~ RemoteFileInclusion attack
Index(es):
- Date
- Thread