Coppermine Photo Gallery 1.0 - PHP Code Injection

QQ空间 新浪微博 微信 QQ facebook twitter
漏洞ID 1053813 漏洞类型
发布时间 2003-04-07 更新时间 2003-04-07
CVE编号 N/A CNNVD-ID N/A
漏洞平台 PHP CVSS评分 N/A
|漏洞来源
https://www.exploit-db.com/exploits/22473
|漏洞详情
漏洞细节尚未披露
|漏洞EXP
source: http://www.securityfocus.com/bid/7300/info

Coppermine Photo Gallery has been reported prone to PHP code injection attacks.

Due to a lack of sufficient sanitization performed on user-supplied filenames that are uploaded into the Photo Gallery, an attacker may upload a malicious JPEG. The attacker may craft it in such a way that PHP code execution will occur when the image is viewed.

This attack may result in arbitrary PHP code execution in the security context of the web server that is hosting the vulnerable application. 

http://www.example.com/albums/userpics/Copperminer.jpg.php?[command]

Where command can be something like "id;uname%20-a" or "cat%20/etc/passwd"

https://github.com/offensive-security/exploit-database-bin-sploits/raw/master/bin-sploits/22473.tar.gz