Coppermine version 1.4.17 and earlier are vulnerable to a seriousinsertion exploit. Coppermine advise immediate upgrade to version 1.4.18. (14/04/2008).
This article is for customers who have installed Coppermine from our one-click installation (they will have version 1.4.13 or later). It can also be used by customers who have installed Coppermine version 1.4.0 or later independently. Those customers who have installed earlier versions of Coppermine should go to
and follow the instructions in Stage 3. Upgrading.
Step 1. - Make a backup (dump) of your .
To do this go to your eXtend Note its name and location as you will need them later., select ; select your coppermine (it may have a name like webnn-a-cpg14*); and select 'Backup' now. The backup will be to your local computer. Save it as a .
Step 2. - Name of your original installation
Step 3. - Move your pictures to a safe place where they will not be overwritten or deleted.
You must do this step once, but not more. If you restart the upgrade after you have done this step once, do step 3a (at bottom of this article) instead.
to your :-
> cd public_html
> rename coppermine coppermine.old
Step 4. - Do the one-click install of a new coppermine application
Select Coppermine from your eXtendand choose the same installation as before, eg coppermine. This will install version 1.4.18 to that .
Step 5. -to your
(use the same password asabove)
find . | cpio -pmud ../../coppermine/albums
Step 6. - Restore the oldto the new .
In your eXtendfind the new and click manage.
In the left navigation column select the new(not information_schema)
On the top navigation bar select 'Import'
Browse for theto import. You are browsing on your local computer not the . The is where it was backed up to (step 1.) and will have the name of the old .
Step 7. - If you have made a custom theme, apply the changes that were introduced in the themes structure to your custom-made theme - refer to the theme-upgrade guide. Your old theme will be under the coppermine.old tree.
If you mess up, it's OK to start over but you should skip step3 after the first try. Your originalis unchanged and all the pictures are safe in public_html/coppermine.old/albums.
You will need to remove thepublic_html/coppermine because the one-click install requires an empty or non-existing target , so instead of step 3 do this:-
Step 3a. - Prepare for one-click installation
DO NOT DO THIS UNTIL YOUR coppermine/albums HAS BEEN MADE SAFE (the original step 3). This step will delete the coppermine (and its contents) if it exists.
(use the same password as)
rm -fr public_html/coppermine
If you do not this you will not be able to do the one-click install to thecoppermine.