Show filters
180 Total Results
Displaying 151-160 of 180
Sort by:
Attacker Value
Unknown
CVE-2007-0115
Disclosure Date: January 09, 2007 (last updated October 04, 2023)
Static code injection vulnerability in Coppermine Photo Gallery 1.4.10 and earlier allows remote authenticated administrators to execute arbitrary PHP code via the Username to login.php, which is injected into an error message in security.log.php, which can then be accessed using viewlog.php.
0
Attacker Value
Unknown
CVE-2006-6123
Disclosure Date: November 26, 2006 (last updated October 04, 2023)
Coppermine Photo Gallery (CPG) 1.4.8 stable, with register_globals enabled, allows remote attackers to bypass XSS protection and set arbitrary variables via a query string that causes the variable to be defined in global space, with separate _GET, _REQUEST, or other critical parameters, which are unset by the protection scheme and prevent the original variable from being detected.
0
Attacker Value
Unknown
CVE-2006-5622
Disclosure Date: October 31, 2006 (last updated October 04, 2023)
SQL injection vulnerability in picmgr.php in Coppermine Photo Gallery 1.4.9 allows remote attackers to execute arbitrary SQL commands via the aid parameter.
0
Attacker Value
Unknown
CVE-2006-4321
Disclosure Date: August 24, 2006 (last updated October 04, 2023)
PHP remote file inclusion vulnerability in cpg.php in the Coppermine Photo Gallery component (com_cpg) 1.0 and earlier for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.
0
Attacker Value
Unknown
CVE-2006-3688
Disclosure Date: July 21, 2006 (last updated October 04, 2023)
SQL injection vulnerability in Room.php in Francisco Charrua Photo-Gallery 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.
0
Attacker Value
Unknown
CVE-2006-3064
Disclosure Date: June 19, 2006 (last updated October 04, 2023)
SQL injection vulnerability in the add_hit function in include/function.inc.php in Coppermine Photo Gallery (CPG) 1.4.8, when "Keep detailed hit statistics" is enabled, allows remote attackers to execute arbitrary SQL commands via the (1) referer and (2) user-agent HTTP headers.
0
Attacker Value
Unknown
CVE-2006-3032
Disclosure Date: June 15, 2006 (last updated October 04, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in Xtreme ASP Photo Gallery 1.05 and earlier, and possibly 2.0 (trial), allow remote attackers to inject arbitrary web script or HTML via the (1) catname and (2) total parameters in (a) displaypic.asp, and the (3) catname parameter in (b) displaythumbs.asp.
0
Attacker Value
Unknown
CVE-2006-2976
Disclosure Date: June 12, 2006 (last updated October 04, 2023)
Unspecified vulnerability in usermgr.php in Coppermine Photo Gallery before 1.4.7 has unknown impact and remote attack vectors, possibly related to authorization/authentication errors.
0
Attacker Value
Unknown
CVE-2006-2514
Disclosure Date: May 22, 2006 (last updated October 04, 2023)
Coppermine galleries before 1.4.6, when running on Apache with mod_mime installed, allows remote attackers to upload arbitrary files via a filename with multiple file extensions.
0
Attacker Value
Unknown
CVE-2006-2079
Disclosure Date: April 27, 2006 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in portfolio.php in Verosky Media Instant Photo Gallery, possibly before 1.0.2, allows remote attackers to inject arbitrary web script or HTML via the cat_id parameter.
0
