CVE-2008-3481

Estado: ModificadaAlta (7.5)—💥 Exploit
themes/sample/theme.php in Coppermine Photo Gallery (CPG) 1.4.18 and earlier allows remote attackers to obtain sensitive information via a direct request, which reveals the installation path in an error message.
CVSS

Versión: 2.0
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Puntuación base: 7.5
Probabilidad de explotación (EPSS)

Probabilidad de explotación en los próximos 30 días: 2.11%
Percentil entre todas las CVEs puntuadas: 81
Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
💥 Exploits públicos

Hay código de explotación o plantillas de detección públicos. No es lo mismo que explotación activa confirmada (KEV), pero aumenta el riesgo: parchee con prioridad.
Publicado en Exploit-DB · Coppermine Photo Gallery 1.4.18 - Local File Inclusion / Remote Code Execution (31/7/2008)
Tecnologías afectadas (1)

Coppermine-gallery — Coppermine Photo Gallery
CWE

CWE-94
Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2008-3481",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2008-08-05T19:41:00.000",
  "references": [
    {
      "url": "http://securityreason.com/securityalert/4108",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://www.exploit-db.com/exploits/6178",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://securityreason.com/securityalert/4108",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.exploit-db.com/exploits/6178",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-94"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "themes/sample/theme.php in Coppermine Photo Gallery (CPG) 1.4.18 and earlier allows remote attackers to obtain sensitive information via a direct request, which reveals the installation path in an error message."
    },
    {
      "lang": "es",
      "value": "themes/sample/theme.php en Coppermine Photo Gallery (CPG) 1.4.18 y versiones anteriores que permite a los atacantes remotos obtener información sensible a través de peticiones directas, que revelan la ruta de instalación en un mensaje de error."
    }
  ],
  "lastModified": "2026-06-16T22:55:54.350",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "18597B1E-61F4-4BBA-90B5-5B5F5BF78B85",
              "versionEndIncluding": "1.4.18"
            },
            {
              "criteria": "cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E358276F-157E-4D98-9055-061E6F2F2948"
            },
            {
              "criteria": "cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.0:rc3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9A1831F9-4B4A-4226-B219-B3AFF06FFDBA"
            },
            {
              "criteria": "cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1C457C25-AF6B-4F67-BD3B-83361A48CDBB"
            },
            {
              "criteria": "cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.1:beta_2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "808B8E20-BE09-4FC2-BC73-2F10261E82B5"
            },
            {
              "criteria": "cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.1.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2003E2A5-A902-45A1-9189-15B956976ECD"
            },
            {
              "criteria": "cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.2.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4A53D1BF-C884-40F9-9D46-9CCD9ADC183E"
            },
            {
              "criteria": "cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.2.0:rc2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "34A35889-023F-4305-A5A8-F7A8D3409172"
            },
            {
              "criteria": "cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.2.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E51F81AC-6AE1-40E5-B2CB-34E1B5985C93"
            },
            {
              "criteria": "cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.2.1:b:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8A465AB3-1426-4966-87DF-A1FA3FCCE5A9"
            },
            {
              "criteria": "cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.2.1:b-nuke:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E9D7FF03-F2A7-4014-BF17-8393F5220AC4"
            },
            {
              "criteria": "cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.3.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BC98C672-0D2E-4A78-A206-CC44A5A6E14E"
            },
            {
              "criteria": "cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4:beta:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "60C520A7-686D-40AB-A41B-EDDF3EC86819"
            },
            {
              "criteria": "cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.0:alpha:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4AFF3F0F-88BF-4EB4-8DCA-4D46D181FCF2"
            },
            {
              "criteria": "cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.1:beta:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "196B664C-C400-4770-893B-E327D40CD525"
            },
            {
              "criteria": "cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A3BF818D-86E5-4886-9447-FE70CBEAEA0B"
            },
            {
              "criteria": "cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B94FCD31-EECA-4323-A63A-554A2AFB3DA5"
            },
            {
              "criteria": "cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C1C70B0A-C8C8-449E-A8C4-A595B7404DED"
            },
            {
              "criteria": "cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E4388EF8-6825-4E8A-B9F2-7D2F69A95865"
            },
            {
              "criteria": "cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "27D59D3A-F55C-4403-BD43-35162EC0E4FA"
            },
            {
              "criteria": "cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.7:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "13B39376-C331-45B5-95AD-C3DD56BBF687"
            },
            {
              "criteria": "cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.8:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FF3DFE45-B65A-46FB-8584-A338143E4F68"
            },
            {
              "criteria": "cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.9:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "15516E4B-8B16-4B81-8881-2E358144BA79"
            },
            {
              "criteria": "cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.10:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "ECEE8E75-36D2-4F99-967E-52FDFA150E17"
            },
            {
              "criteria": "cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.11:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B8946662-2C1C-4113-977F-5D7FC3161565"
            },
            {
              "criteria": "cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.12:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C2F59212-9725-4926-9905-28C8C64A3A58"
            },
            {
              "criteria": "cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.13:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A5FB7773-BBCA-4825-8489-7EE43D6BD312"
            },
            {
              "criteria": "cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.14:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "71058CB9-81CA-4F5B-8204-F21C906A71EE"
            },
            {
              "criteria": "cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.15:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "197EF2C1-ADCF-4596-B5A0-689C10720906"
            },
            {
              "criteria": "cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.16:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EB199205-489B-4BB7-81A4-94D45E19349B"
            },
            {
              "criteria": "cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.17:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BFD299AB-0B18-472B-B99E-C0D585AA21CE"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "evaluatorImpact": "as per vendor link: http://coppermine-gallery.net/\r\n\"The development team is releasing a security update for Coppermine in order to counter a recently discovered injection vulnerability. It is important that all users who run version cpg1.4.18 or older update to this latest version as soon as possible.\" CVSS score based on this information.",
  "sourceIdentifier": "cve@mitre.org"
}