Coppermine Photo Gallery vulnerabilities | LiveThreat CVE Feed

Product

Coppermine Photo Gallery

by coppermine-gallery · last CVE Aug 30, 2026

CVEs

On KEV

8.8

Max CVSS

New 30D

Vulnerabilities21 In the news0 Timeline

Severity mix

Critical 0High 1Medium 2Low 2

Severity

All severities21 Critical0 High1 Medium2 Low2

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Coppermine Photo Gallery to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2023-53868	8.8	1%	Dec 15	Coppermine Gallery 1.6.25 Remote Code Execution via Plugin Upload Affected: 1.6.25
CVE-2018-14478	6.1	1%	May 7	ecard.php in Coppermine Photo Gallery (CPG) 1.5.46 has XSS via the sender_name, recipient_email, greetings, or recipient_name parameter Affected: 1.5.46
CVE-2014-4612	6.1	1%	Mar 16	Cross-site scripting (XSS) vulnerability in the keywords manager (keywordmgr.php) in Coppermine Photo Gallery before 1.5.27 and 1.6.x before 1.6.01 allows remote attackers to… Affected: before 1.5.28; 1.6.0 before 1.6.01
CVE-2026-82483	3.5	0%	Aug 30	coppermine-gallery Coppermine Photo Gallery Hidden Album Update Endpoint db_input.php cross site scripting Affected: 1.6.0; 1.6.1; 1.6.2; 1.6.3; 1.6.4; 1.6.5; +23 more
CVE-2026-82482	3.5	0%	Aug 30	coppermine-gallery Coppermine Photo Gallery edit_profile Endpoint profile.php cross site scripting Affected: 1.6.0; 1.6.1; 1.6.2; 1.6.3; 1.6.4; 1.6.5; +23 more
CVE-2015-6528	–	1%	Aug 20	Multiple cross-site scripting (XSS) vulnerabilities in install_classic.php in Coppermine Photo Gallery (CPG) 1.5.36 allow remote attackers to inject arbitrary web script or HTML… Affected: 1.5.36
CVE-2015-3923	–	2%	Jun 10	Coppermine Photo Gallery before 1.5.36 allows remote attackers to enumerate directories via a full path in the folder parameter to minibrowser.php Affected: through 1.5.4
CVE-2015-3922	–	2%	May 27	Open redirect vulnerability in mode.php in Coppermine Photo Gallery before 1.5.36 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via… Affected: through 1.5.34
CVE-2015-3921	–	2%	May 27	Cross-site scripting (XSS) vulnerability in contact.php in Coppermine Photo Gallery before 1.5.36 allows remote authenticated users to inject arbitrary web script or HTML via the… Affected: through 1.5.34
CVE-2012-1614	–	9%	Sep 4	Coppermine Photo Gallery before 1.5.20 allows remote attackers to obtain sensitive information via (1) a direct request to plugins/visiblehookpoints/index.php, an invalid (2) page… Affected: through 1.5.18; 1.0; 1.0; 1.1; 1.1; 1.1.0; +34 more
CVE-2012-1613	–	2%	Sep 4	Cross-site scripting (XSS) vulnerability in edit_one_pic.php in Coppermine Photo Gallery before 1.5.20 allows remote authenticated users with certain privileges to inject… Affected: through 1.5.18; 1.0; 1.0; 1.1; 1.1; 1.1.0; +34 more
CVE-2011-3722	–	1%	Sep 23	Coppermine Photo Gallery (CPG) 1.5.12 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error… Affected: 1.5.12
CVE-2011-2476	–	1%	Jun 14	Cross-site scripting (XSS) vulnerability in Coppermine Photo Gallery (CPG) before 1.5.12 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a… Affected: through 1.5.10; 1.0; 1.0; 1.1; 1.1; 1.1.0; +34 more
CVE-2010-4667	–	1%	Jun 14	Cross-site scripting (XSS) vulnerability in Coppermine Photo Gallery (CPG) before 1.4.27 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors Affected: through 1.4.26; 1.0; 1.0; 1.1; 1.1; 1.1.0; +34 more
CVE-2010-4693	–	2%	Jan 11	Multiple cross-site scripting (XSS) vulnerabilities in Coppermine Photo Gallery 1.5.10 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) h and… Affected: through 1.5.10; 1.0; 1.0; 1.1; 1.1; 1.1.0; +34 more
CVE-2008-7187	–	1%	Sep 9	Coppermine Photo Gallery (CPG) 1.4.14 allows remote attackers to obtain sensitive information via a direct request to include/slideshow.inc.php, which leaks the installation path… Affected: 1.4.14
CVE-2008-7186	–	1%	Sep 9	Coppermine Photo Gallery (CPG) 1.4.14 does not restrict access to update.php, which allows remote attackers to obtain sensitive information such as the database table prefix via a… Affected: 1.4.14
CVE-2008-3486	–	6%	Aug 6	Directory traversal vulnerability in the user_get_profile function in include/functions.inc.php in Coppermine Photo Gallery (CPG) 1.4.18 and earlier, when the charset is utf-8,… Affected: through 1.4.18; 1.0; 1.0; 1.1; 1.1; 1.1.0; +25 more
CVE-2008-3481	–	2%	Aug 5	themes/sample/theme.php in Coppermine Photo Gallery (CPG) 1.4.18 and earlier allows remote attackers to obtain sensitive information via a direct request, which reveals the… Affected: through 1.4.18; 1.0; 1.0; 1.1; 1.1; 1.1.0; +25 more
CVE-2008-0504	–	2%	Jan 31	Multiple SQL injection vulnerabilities in Coppermine Photo Gallery (CPG) before 1.4.15 allow remote authenticated administrators to execute arbitrary SQL commands via the (1)… Affected: through 1.4.14; 1.0; 1.0; 1.1; 1.1; 1.1.0; +22 more
CVE-2005-3979	–	2%	Dec 3	relocate_server.php in Coppermine Photo Gallery (CPG) 1.4.2 and 1.4 beta is not removed after installation and does not use authentication, which allows remote attackers to obtain… Affected: 1.4; 1.4.2