CVE:CVE-2004-1984
CNNVD:CNNVD-200405-003
Coppermine Photo Gallery 1.2.2b and 1.2.0 RC4版本存在漏洞。远程攻击者可以通过对(1) phpinfo.php， (2) addpic.php， (3) config.php， (4) db_input.php， (5) displayecard.php， (6) ecard.php， (7) crop.inc.php的直接HTTP请求获得敏感信息，该漏洞揭示了PHP错误信息的完整路径。
solution:Upgrade coppermine coppermine_photo_gallery to a higher version than 1.0_rc3,1.1_.0,1.1_beta_2,1.2,1.2.1,1.2.2_b,and avoid the version 1.0_rc3,1.1_.0,1.1_beta_2,1.2,1.2.1,1.2.2_b; Upgrade francisco_burzi php-nuke to a higher version than 6.9,7.0,7.0_final,7.1,7.2,and avoid the version 6.9,7.0,7.0_final,7.1,7.2