This script is Copyright (C) 2007-2016 Tenable Network Security, Inc.
The remote FreeBSD host is missing a security-related update.
The coppermine development team reports two vulnerabilities with the
coppermine application. These vulnerabilities are caused by improper
checking of the log variable in 'viewlog.php' and improper checking of
the referer variable in 'mode.php'. This could allow local file
inclusion, potentially disclosing valuable information and could lead
to an attacker conducting a cross site scripting attack against the
See also :
Update the affected package.
Risk factor :
Medium / CVSS Base Score : 6.5
Family: FreeBSD Local Security Checks
Nessus Plugin ID: 26084 (freebsd_pkg_12488805677311dc8be802e0185f8d72.nasl)
Get Nessus Professional to scan unlimited IPs, run compliance checks & moreBuy Nessus Professional Now