Unrated severityNVD Advisory· Published Feb 8, 2007· Updated Apr 23, 2026

CVE-2007-0836

Description

admin.php in Coppermine Photo Gallery 1.4.10, and possibly earlier, allows remote authenticated users to include arbitrary local and possibly remote files via the (1) "Path to custom header include" and (2) "Path to custom footer include" form fields. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.

Affected products

Coppermine/Coppermine Photo Gallery
cpe:2.3:a:coppermine:coppermine_photo_gallery:*:*:*:*:*:*:*:*
Range: <=1.4.10

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

secunia.com/advisories/24019nvdVendor Advisory
osvdb.org/33094nvd
www.securityfocus.com/bid/22409nvd
exchange.xforce.ibmcloud.com/vulnerabilities/32233nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000