CP
Product
Coppermine Photo Gallery
35
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 0
Watch
Add Coppermine Photo Gallery to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2009-1616 | – | May 11 | Cross-site scripting (XSS) vulnerability in docs/showdoc.php in Coppermine Photo Gallery (CPG) before 1.4.22 allows remote attackers to inject arbitrary web script or HTML via the… Affected: 1.4.22 |
| CVE-2008-1841 | – | Apr 16 | SQL injection vulnerability in the session handling functionality in bridge/coppermine.inc.php in Coppermine Photo Gallery (CPG) 1.4.17 and earlier allows remote attackers to… Affected: 1.2.0; 1.2.0rc2; 1.2.1; 1.3.0; 1.3.1; 1.3.2; +16 more |
| CVE-2008-1840 | – | Apr 16 | SQL injection vulnerability in upload.php in Coppermine Photo Gallery (CPG) 1.4.16 and earlier allows remote authenticated users or user-assisted remote HTTP servers to execute… Affected: through 1.4.16; 1.4; 1.4.1; 1.4.2; 1.4.3; 1.4.4; +10 more |
| CVE-2008-0506 | – | Jan 31 | include/imageObjectIM.class.php in Coppermine Photo Gallery (CPG) before 1.4.15, when the ImageMagick picture processing method is configured, allows remote attackers to execute… Affected: through 1.4.14 |
| CVE-2008-0505 | – | Jan 31 | Multiple cross-site scripting (XSS) vulnerabilities in docs/showdoc.php in Coppermine Photo Gallery (CPG) before 1.4.15 allow remote attackers to inject arbitrary web script or… Affected: through 1.4.14; 1.4.10; 1.4.11; 1.4.12; 1.4.13 |
| CVE-2007-5888 | – | Nov 7 | Cross-site scripting (XSS) vulnerability in displayecard.php in Coppermine Photo Gallery (CPG) before 1.4.14 allows remote attackers to inject arbitrary web script or HTML via the… Affected: through 1.4.13 |
| CVE-2007-4977 | – | Sep 19 | Cross-site scripting (XSS) vulnerability in mode.php in Coppermine Photo Gallery (CPG) 1.4.12 and earlier allows remote attackers to inject arbitrary web script or HTML via the… Affected: 1.4; 1.4.2; 1.4.4; 1.4.9; 1.4.10; 1.4.11; +1 more |
| CVE-2007-4976 | – | Sep 19 | Directory traversal vulnerability in viewlog.php in Coppermine Photo Gallery (CPG) 1.4.12 and earlier allows remote authenticated administrators to include and execute arbitrary… Affected: 1.4; 1.4.2; 1.4.4; 1.4.9; 1.4.10; 1.4.11; +1 more |
| CVE-2007-4283 | – | Aug 9 | PHP remote file inclusion vulnerability in bridge/yabbse.inc.php in Coppermine Photo Gallery (CPG) 1.3.1 allows remote attackers to execute arbitrary PHP code via a URL in the… Affected: 1.3.1 |
| CVE-2007-3558 | – | Jul 4 | SQL injection vulnerability in Coppermine Photo Gallery (CPG) before 1.4.11 allows remote attackers to execute arbitrary SQL commands via an album password cookie to an… Affected: through 1.4.10 |
| CVE-2007-1414 | – | Mar 12 | Multiple PHP remote file inclusion vulnerabilities in Coppermine Photo Gallery (CPG) allow remote attackers to execute arbitrary PHP code via a URL in the (1) cmd parameter to (a)… Affected: All versions, or not specified |
| CVE-2007-1107 | – | Feb 26 | SQL injection vulnerability in thumbnails.php in Coppermine Photo Gallery (CPG) 1.3.x allows remote authenticated users to execute arbitrary SQL commands via a cpg131_fav cookie Affected: 1.3; 1.3.2; 1.3.3; 1.3.4 |
| CVE-2007-0836 | – | Feb 8 | admin.php in Coppermine Photo Gallery 1.4.10, and possibly earlier, allows remote authenticated users to include arbitrary local and possibly remote files via the (1) "Path to… Affected: through 1.4.10 |
| CVE-2007-0835 | – | Feb 8 | admin.php in Coppermine Photo Gallery 1.4.10, and possibly earlier, allows remote authenticated users to execute arbitrary shell commands via shell metacharacters (";" semicolon)… Affected: through 1.4.10 |
| CVE-2007-0115 | – | Jan 9 | Static code injection vulnerability in Coppermine Photo Gallery 1.4.10 and earlier allows remote authenticated administrators to execute arbitrary PHP code via the Username to… Affected: through 1.4.10 |
| CVE-2007-0122 | – | Jan 9 | Multiple SQL injection vulnerabilities in Coppermine Photo Gallery 1.4.10 and earlier allow remote authenticated administrators to execute arbitrary SQL commands via (1) the cat… Affected: through 1.4.10; 1.0; 1.0_rc3; 1.1; 1.1_beta_2; 1.2; +9 more |
| CVE-2006-6123 | – | Nov 26 | Coppermine Photo Gallery (CPG) 1.4.8 stable, with register_globals enabled, allows remote attackers to bypass XSS protection and set arbitrary variables via a query string that… Affected: 1.4.8_stable |
| CVE-2006-5622 | – | Oct 31 | SQL injection vulnerability in picmgr.php in Coppermine Photo Gallery 1.4.9 allows remote attackers to execute arbitrary SQL commands via the aid parameter Affected: 1.4.9 |
| CVE-2006-4321 | – | Aug 24 | PHP remote file inclusion vulnerability in cpg.php in the Coppermine Photo Gallery component (com_cpg) 1.0 and earlier for Mambo allows remote attackers to execute arbitrary PHP… Affected: 1.0 |
| CVE-2006-3064 | – | Jun 19 | SQL injection vulnerability in the add_hit function in include/function.inc.php in Coppermine Photo Gallery (CPG) 1.4.8, when "Keep detailed hit statistics" is enabled, allows… Affected: 1.4.8 |
| CVE-2006-2976 | – | Jun 12 | Unspecified vulnerability in usermgr.php in Coppermine Photo Gallery before 1.4.7 has unknown impact and remote attack vectors, possibly related to authorization/authentication… Affected: 1.4.2; 1.4.3; 1.4.4; 1.4.5; 1.4.6; 1.4_beta |
| CVE-2006-2514 | – | May 22 | Coppermine galleries before 1.4.6, when running on Apache with mod_mime installed, allows remote attackers to upload arbitrary files via a filename with multiple file extensions Affected: through 1.4.5; 1.0_rc3; 1.1.0; 1.1_beta_2; 1.2; 1.2.1; +8 more |
| CVE-2006-1909 | – | Apr 20 | Directory traversal vulnerability in index.php in Coppermine 1.4.4 allows remote attackers to read arbitrary files via a .//./ (modified dot dot slash) in the file parameter,… Affected: 1.4.4 |
| CVE-2006-0872 | – | Feb 24 | Directory traversal vulnerability in init.inc.php in Coppermine Photo Gallery 1.4.3 and earlier allows remote attackers to include arbitrary files via a Affected: 1.4.3 |
| CVE-2006-0873 | – | Feb 24 | Absolute path traversal vulnerability in docs/showdocs.php in Coppermine Photo Gallery 1.4.3 and earlier allows remote attackers to include arbitrary files via the f parameter,… Affected: 1.4.3 |
| CVE-2005-2676 | – | Aug 23 | Cross-site scripting (XSS) vulnerability in displayimage.php in Coppermine Photo Gallery before 1.3.4 allows remote attackers to inject arbitrary web script or HTML via EXIF data Affected: 1.0_rc3; 1.1_.0; 1.1_beta_2; 1.2; 1.2.1; 1.2.2_b; +3 more |
| CVE-2005-1172 | – | May 2 | Cross-site scripting (XSS) vulnerability in init.inc.php in Coppermine Photo Gallery 1.3.x allows remote attackers to inject arbitrary web script or HTML via the X-Forwarded-For… Affected: 1.0_rc3; 1.1_.0; 1.1_beta_2; 1.2; 1.2.1; 1.2.2_b; +1 more |
| CVE-2005-1226 | – | May 2 | Coppermine Photo Gallery 1.3.2 stores passwords in plaintext, which allows remote attackers to obtain sensitive information Affected: 1.3.2 |
| CVE-2005-1225 | – | May 2 | SQL injection vulnerability in Coppermine Photo Gallery 1.3.2 allows remote attackers to execute arbitrary SQL commands via the favs parameter to (1) init.inc.php or (2)… Affected: 1.3.2 |
| CVE-2004-1984 | – | May 2 | Coppermine Photo Gallery 1.2.2b and 1.2.0 RC4 allows remote attackers to obtain sensitive information via a direct HTTP request to (1) phpinfo.php, (2) addpic.php, (3) config.php,… Affected: 1.0_rc3; 1.1_.0; 1.1_beta_2; 1.2; 1.2.1; 1.2.2_b |
| CVE-2004-1985 | – | Apr 30 | Cross-site scripting (XSS) vulnerability in menu.inc.php in Coppermine Photo Gallery 1.2.2b allows remote attackers to inject arbitrary HTML or web script via the CPG_URL… Affected: 1.0_rc3; 1.1_.0; 1.1_beta_2; 1.2; 1.2.1; 1.2.2_b |
| CVE-2004-1989 | – | Apr 30 | PHP remote file inclusion vulnerability in theme.php in Coppermine Photo Gallery 1.2.2b allows remote attackers to execute arbitrary PHP code by modifying the THEME_DIR parameter… Affected: 1.0_rc3; 1.1_.0; 1.1_beta_2; 1.2; 1.2.1; 1.2.2_b |
| CVE-2004-1988 | – | Apr 30 | PHP remote file inclusion vulnerability in init.inc.php in Coppermine Photo Gallery 1.2.0 RC4 allows remote attackers to execute arbitrary PHP code by modifying the CPG_M_DIR to… Affected: 1.0_rc3; 1.1_.0; 1.1_beta_2; 1.2; 1.2.1; 1.2.2_b |
| CVE-2004-1987 | – | Apr 30 | picmgmtbatch.inc.php in Coppermine Photo Gallery 1.2.2b and 1.2.0 RC4 allows remote attackers with administrative privileges to execute arbitrary commands via shell metacharacters… Affected: 1.0_rc3; 1.1_.0; 1.1_beta_2; 1.2; 1.2.1; 1.2.2_b |
| CVE-2004-1986 | – | Apr 4 | Directory traversal vulnerability in modules.php in Coppermine Photo Gallery 1.2.2b and 1.2.0 RC4 allows remote attackers with administrative privileges to read arbitrary files… Affected: 1.0_rc3; 1.1_.0; 1.1_beta_2; 1.2; 1.2.1; 1.2.2_b |
Showing 35