CVE-2004-1989

No fix known EPSS 9%

PHP remote file inclusion vulnerability in theme.php in Coppermine Photo Gallery 1.2.2b allows remote attackers to execute arbitrary PHP code by modifying the THEME_DIR parameter to reference a URL on a remote web server that contains user_list_info_box.inc.

Published 2005-05-10 · CVE record · OSV

Products: coppermine_photo_gallery, francisco_burzi php-nuke