CVE:CVE-2007-1414
CNNVD:CNNVD-200703-340
Coppermine Photo Gallery(CPG)中存在多个PHP远程文件包含漏洞。远程攻击者可以借助提交到(a)image_processor.php或(b) picmgmt.inc.php的cmd参数或到(c)include/functions.php,(d)include/plugin_api.inc.php,(e)index.php或(f)pluginmgr.php的路径参数中的一个URL，执行任意的PHP代码。
solution:Upgrade coppermine coppermine_photo_gallery to a higher version than *