Unscored severity · published Jan 9, 2007
CVE-2007-0122
Multiple SQL injection vulnerabilities in Coppermine Photo Gallery 1.4.10 and earlier allow remote authenticated administrators to execute arbitrary SQL commands via (1) the cat…
–
CVSS
3.2%
EPSS
No
On KEV
Description
Multiple SQL injection vulnerabilities in Coppermine Photo Gallery 1.4.10 and earlier allow remote authenticated administrators to execute arbitrary SQL commands via (1) the cat parameter to albmgr.php, and possibly (2) the gid parameter to usermgr.php; (3) the start parameter to db_ecard.php; and the albumid parameter to unspecified files, related to the (4) filename_to_title and (5) del_titles functions.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.2% · higher than 88% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CP
Coppermine Photo Gallery · Coppermine
through 1.4.10; 1.0; 1.0_rc3; 1.1; 1.1_beta_2; 1.2; +9 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-0122
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-0122
acid-root.new.fr
http://acid-root.new.fr/poc/19070104.txt
osvdb.org
http://osvdb.org/35852
osvdb.org
http://osvdb.org/35853
osvdb.org
http://osvdb.org/35854
osvdb.org
http://osvdb.org/35855
osvdb.org
http://osvdb.org/35856
More from Coppermine Photo Gallery
–
CVE-2009-1616
Cross-site scripting (XSS) vulnerability in docs/showdoc.php in Coppermine Photo Gallery (CPG) before 1.4.22 allows remote attackers to inject arbitrary web script or HTML via the…
–
CVE-2008-1841
SQL injection vulnerability in the session handling functionality in bridge/coppermine.inc.php in Coppermine Photo Gallery (CPG) 1.4.17 and earlier allows remote attackers to…
–
CVE-2008-1840
SQL injection vulnerability in upload.php in Coppermine Photo Gallery (CPG) 1.4.16 and earlier allows remote authenticated users or user-assisted remote HTTP servers to execute…
–
CVE-2008-0506
include/imageObjectIM.class.php in Coppermine Photo Gallery (CPG) before 1.4.15, when the ImageMagick picture processing method is configured, allows remote attackers to execute…
–
CVE-2008-0505
Multiple cross-site scripting (XSS) vulnerabilities in docs/showdoc.php in Coppermine Photo Gallery (CPG) before 1.4.15 allow remote attackers to inject arbitrary web script or…