Show filters
15 Total Results
Displaying 11-15 of 15
Sort by:
Attacker Value
Unknown
CVE-2008-1840
Disclosure Date: April 16, 2008 (last updated October 04, 2023)
SQL injection vulnerability in upload.php in Coppermine Photo Gallery (CPG) 1.4.16 and earlier allows remote authenticated users or user-assisted remote HTTP servers to execute arbitrary SQL commands via the Content-Type HTTP response header provided by the HTTP server that is used for an upload.
0
Attacker Value
Unknown
CVE-2008-0505
Disclosure Date: January 31, 2008 (last updated October 04, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in docs/showdoc.php in Coppermine Photo Gallery (CPG) before 1.4.15 allow remote attackers to inject arbitrary web script or HTML via the (1) h and (2) t parameters.
0
Attacker Value
Unknown
CVE-2008-0504
Disclosure Date: January 31, 2008 (last updated October 04, 2023)
Multiple SQL injection vulnerabilities in Coppermine Photo Gallery (CPG) before 1.4.15 allow remote authenticated administrators to execute arbitrary SQL commands via the (1) albumid, (2) startpic, and (3) numpics parameters to util.php; and (4) cid_array parameter to reviewcom.php.
0
Attacker Value
Unknown
CVE-2007-4977
Disclosure Date: September 19, 2007 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in mode.php in Coppermine Photo Gallery (CPG) 1.4.12 and earlier allows remote attackers to inject arbitrary web script or HTML via the referer parameter.
0
Attacker Value
Unknown
CVE-2007-4976
Disclosure Date: September 19, 2007 (last updated October 04, 2023)
Directory traversal vulnerability in viewlog.php in Coppermine Photo Gallery (CPG) 1.4.12 and earlier allows remote authenticated administrators to include and execute arbitrary local files via a .. (dot dot) in the log parameter.
0
