Show filters
21 Total Results
Displaying 1-10 of 21
Sort by:
Attacker Value
Unknown
CVE-2015-7386
Disclosure Date: September 28, 2015 (last updated October 05, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in includes/metaboxes.php in the Gallery - Photo Albums - Portfolio plugin 1.3.47 for WordPress allow remote authenticated users to inject arbitrary web script or HTML via the (1) Media Title or (2) Media Subtitle fields.
0
Attacker Value
Unknown
CVE-2012-1614
Disclosure Date: September 04, 2012 (last updated October 05, 2023)
Coppermine Photo Gallery before 1.5.20 allows remote attackers to obtain sensitive information via (1) a direct request to plugins/visiblehookpoints/index.php, an invalid (2) page or (3) cat parameter to thumbnails.php, an invalid (4) page parameter to usermgr.php, or an invalid (5) newer_than or (6) older_than parameter to search.inc.php, which reveals the installation path in an error message.
0
Attacker Value
Unknown
CVE-2012-1613
Disclosure Date: September 04, 2012 (last updated October 05, 2023)
Cross-site scripting (XSS) vulnerability in edit_one_pic.php in Coppermine Photo Gallery before 1.5.20 allows remote authenticated users with certain privileges to inject arbitrary web script or HTML via the keywords parameter.
0
Attacker Value
Unknown
CVE-2010-4667
Disclosure Date: June 14, 2011 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in Coppermine Photo Gallery (CPG) before 1.4.27 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
0
Attacker Value
Unknown
CVE-2011-2476
Disclosure Date: June 14, 2011 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in Coppermine Photo Gallery (CPG) before 1.5.12 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2010-4667.
0
Attacker Value
Unknown
CVE-2010-4693
Disclosure Date: January 11, 2011 (last updated October 04, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in Coppermine Photo Gallery 1.5.10 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) h and (2) t parameters to help.php, or (3) picfile_XXX parameter to searchnew.php.
0
Attacker Value
Unknown
CVE-2010-1186
Disclosure Date: April 07, 2010 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in xml/media-rss.php in the NextGEN Gallery plugin before 1.5.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the mode parameter.
0
Attacker Value
Unknown
CVE-2008-5296
Disclosure Date: December 01, 2008 (last updated October 04, 2023)
Gallery 1.5.x before 1.5.10 and 1.6 before 1.6-RC3, when register_globals is enabled, allows remote attackers to bypass authentication and gain administrative via unspecified cookies. NOTE: some of these details are obtained from third party information.
0
Attacker Value
Unknown
CVE-2008-4702
Disclosure Date: October 22, 2008 (last updated October 04, 2023)
Multiple directory traversal vulnerabilities in PhpWebGallery 1.3.4 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) user[language] and (2) user[template] parameters to (a) init.inc.php, and (b) the user[language] parameter to isadmin.inc.php.
0
Attacker Value
Unknown
CVE-2008-4645
Disclosure Date: October 22, 2008 (last updated October 04, 2023)
plugins/event_tracer/event_list.php in PhpWebGallery 1.7.2 and earlier allows remote authenticated administrators to execute arbitrary PHP code via PHP sequences in the sort parameter, which is processed by create_function.
0
