Exploitation Summary
EIP tracks 1 public exploit for CVE-2004-1989. PoCs published by Janek Vind.
AI-analyzed exploit summary The provided text describes multiple input-validation vulnerabilities in Coppermine Photo Gallery, which may lead to arbitrary command execution, directory traversal, and file inclusion. It includes example URLs demonstrating the vulnerability but lacks executable exploit code.
Description
PHP remote file inclusion vulnerability in theme.php in Coppermine Photo Gallery 1.2.2b allows remote attackers to execute arbitrary PHP code by modifying the THEME_DIR parameter to reference a URL on a remote web server that contains user_list_info_box.inc.
Exploits (1)
The provided text describes multiple input-validation vulnerabilities in Coppermine Photo Gallery, which may lead to arbitrary command execution, directory traversal, and file inclusion. It includes example URLs demonstrating the vulnerability but lacks executable exploit code.