[KAPDA]Coppermine 1.4.8~Parameter Cleanup System ByPass~Registering Global Varables

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: [KAPDA]Coppermine 1.4.8~Parameter Cleanup System ByPass~Registering Global Varables
From: addmimistrator@xxxxxxxxx
Date: 23 Jun 2006 11:25:16 -0000
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm

ORIGINAL ADVISORY:
http://myimei.com/security/2006-06-20/coppermine-148parameter-cleanup-system-bypassregistering-global-varables.html
VENDOR INFORMED
??????-Summary?????-
Software: CPG Coppermine Photo Gallery
Sowtware?s Web Site: http://coppermine.sourceforge.net/
Versions: 1.4.8.stable
Class: Remote
Status: Unpatched
Exploit: Available
Discovered by: imei addmimistrator
Risk Level: Mediume
??????Description?????
Coppermine Photo Gallery has a logical design fault that will result to 
bypassing anti-XSS-Injection?RegGlobal-System.


SEE ORIGINAL ADVISORY FOR MORE DETAILES

Prev by Date: QaTraq 6.5 RC: Multiple XSS Vulnerabilities
Next by Date: [security bulletin] HPSBUX02127 SSRT051056 - rev.1 HP-UX Kernel Local Denial of Service (DoS)
Previous by thread: QaTraq 6.5 RC: Multiple XSS Vulnerabilities
Next by thread: [security bulletin] HPSBUX02127 SSRT051056 - rev.1 HP-UX Kernel Local Denial of Service (DoS)
Index(es):
- Date
- Thread