Coppermine Security Upgrade

[cmyksteve]

Maintenance release cpg1.4.12 (security issue) - upgrade mandatory

+ 02 July 2007

The development team is releasing a security update for Coppermine in order to counter a recently discovered mySQL vulnerability that can lead to disclosure of sensitive information. It is important that all users update to this latest version as soon as possible.

Details from the developer- Coppermine 1.4.12 - Security release.

This is from Jim (earlier today) noting hacking attempts to locate unsecured Coppermine photo galleries.

Originally Posted by Jim

Nothing shows up in the logs besides a whole lot of fishing for coppermine files.

[edwurster]

Interesting observation: I upgraded, and the versioncheck tool finds 1.4.12 (the latest). However, it lists all files as missing. The update works fine, though. Maybe it is like Windows, you have to reboot a few times - LOL.

Edit: I found an option "coppermine is installed in the webroot" - and this helped versioncheck find the files.