CVE-2006-2514 - Coppermine galleries before 1.4.6, when running on Apache with mod_mime installed, allows remote attackers to upload arbitrary files via a filename with multiple file extensions

Back Back to CVE browser

HIGH

Coppermine galleries before 1.4.6, when running on Apache with mod_mime installed, allows remote attackers to upload arbitrary files via a filename with multiple file extensions

Published May 22, 2006

7.5

HIGH

CVSS 2.0

EPSS 1.55%

Description

Coppermine galleries before 1.4.6, when running on Apache with mod_mime installed, allows remote attackers to upload arbitrary files via a filename with multiple file extensions.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (4)

http://secunia.com/advisories/20211
third-party-advisoryx_refsource_SECUNIAPatchVendor Advisory
http://sourceforge.net/project/shownotes.php?group_id=89658&release_id=418266
x_refsource_CONFIRMPatch
http://www.vupen.com/english/advisories/2006/1892
vdb-entryx_refsource_VUPEN
https://exchange.xforce.ibmcloud.com/vulnerabilities/26588
vdb-entryx_refsource_XF

Link	Providers	Tags
http://secunia.com/advisories/20211		third-party-advisoryx_refsource_SECUNIAPatchVendor Advisory
http://sourceforge.net/project/shownotes.php?group_id=89658&release_id=418266		x_refsource_CONFIRMPatch
http://www.vupen.com/english/advisories/2006/1892		vdb-entryx_refsource_VUPEN
https://exchange.xforce.ibmcloud.com/vulnerabilities/26588		vdb-entryx_refsource_XF

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published May 22, 2006

Updated Aug 7, 2024

Reserved May 22, 2006

Link CVE-2006-2514

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2006-2514

Red Hat

Severity n/a

Public date n/a

Links CVE-2006-2514