Unscored severity · published Sep 4, 2012
CVE-2012-1613
Cross-site scripting (XSS) vulnerability in edit_one_pic.php in Coppermine Photo Gallery before 1.5.20 allows remote authenticated users with certain privileges to inject…
–
CVSS
2.2%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in edit_one_pic.php in Coppermine Photo Gallery before 1.5.20 allows remote authenticated users with certain privileges to inject arbitrary web script or HTML via the keywords parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.2% · higher than 82% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CP
Coppermine Photo Gallery · Coppermine-gallery
through 1.5.18; 1.0; 1.0; 1.1; 1.1; 1.1.0; +34 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-1613
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-1613
Exploit
http://archives.neohapsis.com/archives/bugtraq/2012-03/0167.html
Patch
http://coppermine.svn.sourceforge.net/viewvc/coppermine/trunk/cpg1.6.x/edit_one_pic.php?r1=8348&r2=8354
forum.coppermine-gallery.net
http://forum.coppermine-gallery.net/index.php/topic%2C74682.0.html
osvdb.org
http://osvdb.org/80731
Exploit
http://packetstormsecurity.org/files/111369/Coppermine-1.5.18-Cross-Site-Scripting-Path-Disclosure.html
Vendor Advisory
http://secunia.com/advisories/48643
More from Coppermine Photo Gallery
8.8
CVE-2023-53868
Coppermine Gallery 1.6.25 Remote Code Execution via Plugin Upload
6.1
CVE-2018-14478
ecard.php in Coppermine Photo Gallery (CPG) 1.5.46 has XSS via the sender_name, recipient_email, greetings, or recipient_name parameter
6.1
CVE-2014-4612
Cross-site scripting (XSS) vulnerability in the keywords manager (keywordmgr.php) in Coppermine Photo Gallery before 1.5.27 and 1.6.x before 1.6.01 allows remote attackers to…
3.5
CVE-2026-82483
coppermine-gallery Coppermine Photo Gallery Hidden Album Update Endpoint db_input.php cross site scripting
3.5
CVE-2026-82482
coppermine-gallery Coppermine Photo Gallery edit_profile Endpoint profile.php cross site scripting