Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2005-1172
HistoryMay 02, 2005 - 4:00 a.m.

CVE-2005-1172

2005-05-0204:00:00
mitre
web.nvd.nist.gov
31
xss
vulnerability
coppermine photo gallery
init.inc.php
web script
html

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.6

Confidence

High

EPSS

0.002

Percentile

64.9%

JSON

Cross-site scripting (XSS) vulnerability in init.inc.php in Coppermine Photo Gallery 1.3.x allows remote attackers to inject arbitrary web script or HTML via the X-Forwarded-For parameter.

Affected configurations

Nvd
Node
copperminecoppermine_photo_galleryMatch1.0_rc3
OR
copperminecoppermine_photo_galleryMatch1.1_.0
OR
copperminecoppermine_photo_galleryMatch1.1_beta_2
OR
copperminecoppermine_photo_galleryMatch1.2
OR
copperminecoppermine_photo_galleryMatch1.2.1
OR
copperminecoppermine_photo_galleryMatch1.2.2_b
OR
copperminecoppermine_photo_galleryMatch1.3
VendorProductVersionCPE
copperminecoppermine_photo_gallery1.0_rc3cpe:2.3:a:coppermine:coppermine_photo_gallery:1.0_rc3:*:*:*:*:*:*:*
copperminecoppermine_photo_gallery1.1_.0cpe:2.3:a:coppermine:coppermine_photo_gallery:1.1_.0:*:*:*:*:*:*:*
copperminecoppermine_photo_gallery1.1_beta_2cpe:2.3:a:coppermine:coppermine_photo_gallery:1.1_beta_2:*:*:*:*:*:*:*
copperminecoppermine_photo_gallery1.2cpe:2.3:a:coppermine:coppermine_photo_gallery:1.2:*:*:*:*:*:*:*
copperminecoppermine_photo_gallery1.2.1cpe:2.3:a:coppermine:coppermine_photo_gallery:1.2.1:*:*:*:*:*:*:*
copperminecoppermine_photo_gallery1.2.2_bcpe:2.3:a:coppermine:coppermine_photo_gallery:1.2.2_b:*:*:*:*:*:*:*
copperminecoppermine_photo_gallery1.3cpe:2.3:a:coppermine:coppermine_photo_gallery:1.3:*:*:*:*:*:*:*

Related

openvas 2
nessus 2
freebsd 1
cvelist 1
nvd 1
openvas
openvas
FreeBSD Ports: coppermine
2008-09-04 00:00:00
FreeBSD Ports: coppermine
2008-09-04 00:00:00
nessus
nessus
Coppermine Photo Gallery init.inc.php X-Forwarded-For XSS
2005-04-18 00:00:00
FreeBSD : coppermine -- IP spoofing and XSS vulnerability (756db070-b9d4-11d9-ae81-000ae42e9b93)
2005-07-13 00:00:00
freebsd
freebsd
coppermine -- IP spoofing and XSS vulnerability
2005-04-18 00:00:00
cvelist
cvelist
CVE-2005-1172
2005-04-18 04:00:00
nvd
nvd
CVE-2005-1172
2005-05-02 04:00:00

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.6

Confidence

High

EPSS

0.002

Percentile

64.9%

JSON
Related for CVE-2005-1172
openvas2nessus2freebsd1cvelist1nvd1