Remote Information Disclosure in Coppermine Photo Gallery by Coppermine
CVE-2005-3979
Currently unrated
What is CVE-2005-3979?
A security flaw in the Coppermine Photo Gallery's relocate_server.php script, present in versions 1.4.2 and 1.4 beta, allows unauthorized remote attackers to access sensitive data. Since this script remains on the server after installation and lacks appropriate authentication controls, attackers can exploit direct requests to retrieve critical information, including database configuration settings. This vulnerability highlights the importance of secure installation practices and robust authentication mechanisms to protect sensitive data from unauthorized access.