Coppermine Photo Gallery Voting Restriction Bypass

medium Nessus Plugin ID 15531

Language:

Synopsis

A web application running on the remote host has an access restriction bypass vulnerability.

Description

The remote host is running Coppermine Gallery - a set of PHP scripts designed to handle galleries of pictures.

This product has a vulnerability which allows a remote attacker with cookies disabled to cast multiple votes for a picture.

Solution

Upgrade to Coppermine 1.3.3 or later.

Plugin Details

Severity: Medium

ID: 15531

File Name: coppermine_gallery_vote_restriction.nasl

Version: 1.13

Type: remote

Family: CGI abuses

Published: 10/21/2004

Updated: 1/19/2021

Supported Sensors: Nessus

Risk Information

CVSS v2

Risk Factor: Medium

Base Score: 5

Temporal Score: 5

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:P/A:N

Vulnerability Information

Exploit Available: true

Exploit Ease: No exploit is required

Vulnerability Publication Date: 10/12/2004

Reference Information

BID: 11485

Detections

Analytics