VULNERABILITY INTELLIGENCE

CVE-2005-3979

CVSS score5 MEDIUM
EPSS probability1.55%
CISA KEVNot currently listed
Published2005-12-03
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:N/A:N

Description

relocate_server.php in Coppermine Photo Gallery (CPG) 1.4.2 and 1.4 beta is not removed after installation and does not use authentication, which allows remote attackers to obtain sensitive information, such as database configuration, via a direct request.

Weakness classification

  • CWE-287: Improper Authentication

Primary references