security issue in 1.4.9?

[François Keller]

Hi,

This link was post on french board:
http://www.milw0rm.com/exploits/2660
Is this a real security problem on Coppermine 1.4.9 ?

[Aditya Mooley]

Yes, it is an exploit.

Till the time we release a new security update, users can manually fix this as follows:

Open picmgr.php
Somewhere near line 353
find:

Code Select Expand


$aid = isset($_GET['aid']) ? ($_GET['aid']) : 0;


replace with

Code Select Expand


$aid = isset($_GET['aid']) ? (int)($_GET['aid']) : 0;


[François Keller]

Ok thank's for replay, i'll post your fix in the french board

[Joachim Müller]

cpg1.4.10 has been released to address the issue - see announcement thread.