[KAPDA::48]CopperminePhotoGallery1.4.8~ addhit() function~ SQLinjection attack
[ORIGINAL ADVISORY:]
http://myimei.com/security/2006-06-11/copperminephotogallery148-addhit-function-sqlinjection-attack.html
HTTP://KAPDA.IR
??-Summary??-
Software: CPG Coppermine Photo Gallery
Software?s Web Site: http://coppermine.sourceforge.net/
Versions: 1.4.8.stable
Class: Remote
Status: Unpatched
Exploit: Available
Solution: Available
Discovered by: imei addmimistrator
Risk Level: Mediume-High
??-Description??-
There is a security flaw in Coppermine Photo Gallery, one of popular photo
galleries in internet, that allows attacker perform an SQL INJECTION attack .
VISIT ORIGINAL ADVISORY FOR MORE DETAILES