CO
Vendor
coppermine-gallery
22
CVEs
0
On KEV
0
New 30D
Products
CP8.8
Coppermine Photo Gallery
coppermine-gallery
21 CVEs0 on KEV0 new
CG9.8
Coppermine Gallery
Coppermine-gallery
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-82483 | CP Coppermine Photo Gallery coppermine-gallery | 3.5 | Aug 30 | coppermine-gallery Coppermine Photo Gallery Hidden Album Update Endpoint db_input.php cross site scripting |
| CVE-2026-82482 | CP Coppermine Photo Gallery coppermine-gallery | 3.5 | Aug 30 | coppermine-gallery Coppermine Photo Gallery edit_profile Endpoint profile.php cross site scripting |
| CVE-2023-53868 | CP Coppermine Photo Gallery Coppermine-gallery | 8.8 | Dec 15 | Coppermine Gallery 1.6.25 Remote Code Execution via Plugin Upload |
| CVE-2010-4815 | CG Coppermine Gallery Coppermine-gallery | 9.8 | Feb 5 | Coppermine gallery before 1.4.26 has an input validation vulnerability that allows for code execution |
| CVE-2018-14478 | CP Coppermine Photo Gallery Coppermine-gallery | 6.1 | May 7 | ecard.php in Coppermine Photo Gallery (CPG) 1.5.46 has XSS via the sender_name, recipient_email, greetings, or recipient_name parameter |
| CVE-2014-4612 | CP Coppermine Photo Gallery Coppermine-gallery | 6.1 | Mar 16 | Cross-site scripting (XSS) vulnerability in the keywords manager (keywordmgr.php) in Coppermine Photo Gallery before 1.5.27 and 1.6.x before 1.6.01 allows remote attackers to… |
| CVE-2015-6528 | CP Coppermine Photo Gallery Coppermine-gallery | – | Aug 20 | Multiple cross-site scripting (XSS) vulnerabilities in install_classic.php in Coppermine Photo Gallery (CPG) 1.5.36 allow remote attackers to inject arbitrary web script or HTML… |
| CVE-2015-3923 | CP Coppermine Photo Gallery Coppermine-gallery | – | Jun 10 | Coppermine Photo Gallery before 1.5.36 allows remote attackers to enumerate directories via a full path in the folder parameter to minibrowser.php |
| CVE-2015-3922 | CP Coppermine Photo Gallery Coppermine-gallery | – | May 27 | Open redirect vulnerability in mode.php in Coppermine Photo Gallery before 1.5.36 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via… |
| CVE-2015-3921 | CP Coppermine Photo Gallery Coppermine-gallery | – | May 27 | Cross-site scripting (XSS) vulnerability in contact.php in Coppermine Photo Gallery before 1.5.36 allows remote authenticated users to inject arbitrary web script or HTML via the… |
| CVE-2012-1614 | CP Coppermine Photo Gallery Coppermine-gallery | – | Sep 4 | Coppermine Photo Gallery before 1.5.20 allows remote attackers to obtain sensitive information via (1) a direct request to plugins/visiblehookpoints/index.php, an invalid (2) page… |
| CVE-2012-1613 | CP Coppermine Photo Gallery Coppermine-gallery | – | Sep 4 | Cross-site scripting (XSS) vulnerability in edit_one_pic.php in Coppermine Photo Gallery before 1.5.20 allows remote authenticated users with certain privileges to inject… |
| CVE-2011-3722 | CP Coppermine Photo Gallery Coppermine-gallery | – | Sep 23 | Coppermine Photo Gallery (CPG) 1.5.12 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error… |
| CVE-2011-2476 | CP Coppermine Photo Gallery Coppermine-gallery | – | Jun 14 | Cross-site scripting (XSS) vulnerability in Coppermine Photo Gallery (CPG) before 1.5.12 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a… |
| CVE-2010-4667 | CP Coppermine Photo Gallery Coppermine-gallery | – | Jun 14 | Cross-site scripting (XSS) vulnerability in Coppermine Photo Gallery (CPG) before 1.4.27 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors |
| CVE-2010-4693 | CP Coppermine Photo Gallery Coppermine-gallery | – | Jan 11 | Multiple cross-site scripting (XSS) vulnerabilities in Coppermine Photo Gallery 1.5.10 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) h and… |
| CVE-2008-7187 | CP Coppermine Photo Gallery Coppermine-gallery | – | Sep 9 | Coppermine Photo Gallery (CPG) 1.4.14 allows remote attackers to obtain sensitive information via a direct request to include/slideshow.inc.php, which leaks the installation path… |
| CVE-2008-7186 | CP Coppermine Photo Gallery Coppermine-gallery | – | Sep 9 | Coppermine Photo Gallery (CPG) 1.4.14 does not restrict access to update.php, which allows remote attackers to obtain sensitive information such as the database table prefix via a… |
| CVE-2008-3486 | CP Coppermine Photo Gallery Coppermine-gallery | – | Aug 6 | Directory traversal vulnerability in the user_get_profile function in include/functions.inc.php in Coppermine Photo Gallery (CPG) 1.4.18 and earlier, when the charset is utf-8,… |
| CVE-2008-3481 | CP Coppermine Photo Gallery Coppermine-gallery | – | Aug 5 | themes/sample/theme.php in Coppermine Photo Gallery (CPG) 1.4.18 and earlier allows remote attackers to obtain sensitive information via a direct request, which reveals the… |
| CVE-2008-0504 | CP Coppermine Photo Gallery Coppermine-gallery | – | Jan 31 | Multiple SQL injection vulnerabilities in Coppermine Photo Gallery (CPG) before 1.4.15 allow remote authenticated administrators to execute arbitrary SQL commands via the (1)… |
| CVE-2005-3979 | CP Coppermine Photo Gallery Coppermine-gallery | – | Dec 3 | relocate_server.php in Coppermine Photo Gallery (CPG) 1.4.2 and 1.4 beta is not removed after installation and does not use authentication, which allows remote attackers to obtain… |