CVE-2005-3979

relocate_server.php in Coppermine Photo Gallery (CPG) 1.4.2 and 1.4 beta is not removed after installation and does not use authentication, which allows remote attackers to obtain sensitive information, such as database configuration, via a direct request.

• CWE-287

• http://coppermine-gallery.net/forum/index.php?topic=24217.0Vendor Advisory
• http://secunia.com/advisories/17855Permissions Required, Third Party Advisory
• http://www.vupen.com/english/advisories/2005/2698Permissions Required, Third Party Advisory
• http://coppermine-gallery.net/forum/index.php?topic=24217.0Vendor Advisory
• http://secunia.com/advisories/17855Permissions Required, Third Party Advisory
• http://www.vupen.com/english/advisories/2005/2698Permissions Required, Third Party Advisory

Published

Dec 3, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-3973Multiple cross-site scripting (XSS) vulnerabilities in Drupa…
• CVE-2005-3974Drupal 4.5.0 through 4.5.5 and 4.6.0 through 4.6.3, when run…
• CVE-2005-3975Interpretation conflict in file.inc in Drupal 4.5.0 through …
• CVE-2005-3976SQL injection vulnerability in type.asp, as used in multiple…
• CVE-2005-3977Cross-site scripting (XSS) vulnerability in QualityEBiz Qual…
• CVE-2005-3978Multiple SQL injection vulnerabilities in NetClassifieds Pre…
• CVE-2005-3980SQL injection vulnerability in the ticket query module in Ed…
• CVE-2005-3981NOTE: this issue has been disputed by third parties. Micros…
• CVE-2005-3982CRLF injection vulnerability in layers_toggle.php in WebCale…
• CVE-2005-3983Unknown vulnerability in the login page for HP Systems Insig…
• CVE-2005-3984SQL injection vulnerability in WebCalendar 1.0.1 allows remo…
• CVE-2005-3985The Internet Key Exchange version 1 (IKEv1) implementation i…