Lucene search

[email protected]CVE-2012-1613

HistoryOct 03, 2022 - 4:15 p.m.

CVE-2012-1613

2022-10-0316:15:24

CWE-79

[email protected]

web.nvd.nist.gov

cve-2012-1613

cross-site scripting

xss

vulnerability

photo gallery

coppermine

nvd

5.3 Medium

AI Score

Confidence

High

3.5 Low

CVSS2

Access Vector

Access Complexity

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

56.4%

JSON

Cross-site scripting (XSS) vulnerability in edit_one_pic.php in Coppermine Photo Gallery before 1.5.20 allows remote authenticated users with certain privileges to inject arbitrary web script or HTML via the keywords parameter.

Affected configurations

NVD

Node

coppermine-gallerycoppermine_photo_galleryRange≤1.5.18

coppermine-gallerycoppermine_photo_galleryMatch1.0

coppermine-gallerycoppermine_photo_galleryMatch1.0rc3

coppermine-gallerycoppermine_photo_galleryMatch1.1

coppermine-gallerycoppermine_photo_galleryMatch1.1beta_2

coppermine-gallerycoppermine_photo_galleryMatch1.1.0

coppermine-gallerycoppermine_photo_galleryMatch1.2

coppermine-gallerycoppermine_photo_galleryMatch1.2.0

coppermine-gallerycoppermine_photo_galleryMatch1.2.0rc2

coppermine-gallerycoppermine_photo_galleryMatch1.2.1

coppermine-gallerycoppermine_photo_galleryMatch1.2.1b

coppermine-gallerycoppermine_photo_galleryMatch1.2.1b-nuke

coppermine-gallerycoppermine_photo_galleryMatch1.3.0

coppermine-gallerycoppermine_photo_galleryMatch1.3.1

coppermine-gallerycoppermine_photo_galleryMatch1.3.2

coppermine-gallerycoppermine_photo_galleryMatch1.3.3

coppermine-gallerycoppermine_photo_galleryMatch1.3.4

coppermine-gallerycoppermine_photo_galleryMatch1.3.5

coppermine-gallerycoppermine_photo_galleryMatch1.4.0

coppermine-gallerycoppermine_photo_galleryMatch1.4.0alpha

coppermine-gallerycoppermine_photo_galleryMatch1.4.0beta

coppermine-gallerycoppermine_photo_galleryMatch1.4.1

coppermine-gallerycoppermine_photo_galleryMatch1.4.1beta

coppermine-gallerycoppermine_photo_galleryMatch1.4.2

coppermine-gallerycoppermine_photo_galleryMatch1.4.3

coppermine-gallerycoppermine_photo_galleryMatch1.4.4

coppermine-gallerycoppermine_photo_galleryMatch1.4.5

coppermine-gallerycoppermine_photo_galleryMatch1.4.6

coppermine-gallerycoppermine_photo_galleryMatch1.4.7

coppermine-gallerycoppermine_photo_galleryMatch1.4.8

coppermine-gallerycoppermine_photo_galleryMatch1.4.9

coppermine-gallerycoppermine_photo_galleryMatch1.4.10

coppermine-gallerycoppermine_photo_galleryMatch1.4.11

coppermine-gallerycoppermine_photo_galleryMatch1.4.12

coppermine-gallerycoppermine_photo_galleryMatch1.4.13

coppermine-gallerycoppermine_photo_galleryMatch1.4.14

coppermine-gallerycoppermine_photo_galleryMatch1.4.15

coppermine-gallerycoppermine_photo_galleryMatch1.4.16

coppermine-gallerycoppermine_photo_galleryMatch1.4.17

coppermine-gallerycoppermine_photo_galleryMatch1.4.18

coppermine-gallerycoppermine_photo_galleryMatch1.4.19

coppermine-gallerycoppermine_photo_galleryMatch1.4.20

coppermine-gallerycoppermine_photo_galleryMatch1.4.21

coppermine-gallerycoppermine_photo_galleryMatch1.4.22

coppermine-gallerycoppermine_photo_galleryMatch1.4.23

coppermine-gallerycoppermine_photo_galleryMatch1.4.24

coppermine-gallerycoppermine_photo_galleryMatch1.4.25

coppermine-gallerycoppermine_photo_galleryMatch1.4.26

coppermine-gallerycoppermine_photo_galleryMatch1.4.27

coppermine-gallerycoppermine_photo_galleryMatch1.5.1alpha

coppermine-gallerycoppermine_photo_galleryMatch1.5.2beta

coppermine-gallerycoppermine_photo_galleryMatch1.5.3rc

coppermine-gallerycoppermine_photo_galleryMatch1.5.4

coppermine-gallerycoppermine_photo_galleryMatch1.5.6

coppermine-gallerycoppermine_photo_galleryMatch1.5.8

coppermine-gallerycoppermine_photo_galleryMatch1.5.10

coppermine-gallerycoppermine_photo_galleryMatch1.5.12

coppermine-gallerycoppermine_photo_galleryMatch1.5.14

coppermine-gallerycoppermine_photo_galleryMatch1.5.16

CPENameOperatorVersion
coppermine-gallery:coppermine_photo_gallerycoppermine-gallery coppermine photo galleryle1.5.18
coppermine-gallery:coppermine_photo_gallerycoppermine-gallery coppermine photo galleryeq1.0
coppermine-gallery:coppermine_photo_gallerycoppermine-gallery coppermine photo galleryeq1.1
coppermine-gallery:coppermine_photo_gallerycoppermine-gallery coppermine photo galleryeq1.1.0
coppermine-gallery:coppermine_photo_gallerycoppermine-gallery coppermine photo galleryeq1.2
coppermine-gallery:coppermine_photo_gallerycoppermine-gallery coppermine photo galleryeq1.2.0
coppermine-gallery:coppermine_photo_gallerycoppermine-gallery coppermine photo galleryeq1.2.1
coppermine-gallery:coppermine_photo_gallerycoppermine-gallery coppermine photo galleryeq1.3.0
coppermine-gallery:coppermine_photo_gallerycoppermine-gallery coppermine photo galleryeq1.3.1
coppermine-gallery:coppermine_photo_gallerycoppermine-gallery coppermine photo galleryeq1.3.2

CPE	Name	Operator	Version
coppermine-gallery:coppermine_photo_gallery	coppermine-gallery coppermine photo gallery	le	1.5.18
coppermine-gallery:coppermine_photo_gallery	coppermine-gallery coppermine photo gallery	eq	1.0
coppermine-gallery:coppermine_photo_gallery	coppermine-gallery coppermine photo gallery	eq	1.1
coppermine-gallery:coppermine_photo_gallery	coppermine-gallery coppermine photo gallery	eq	1.1.0
coppermine-gallery:coppermine_photo_gallery	coppermine-gallery coppermine photo gallery	eq	1.2
coppermine-gallery:coppermine_photo_gallery	coppermine-gallery coppermine photo gallery	eq	1.2.0
coppermine-gallery:coppermine_photo_gallery	coppermine-gallery coppermine photo gallery	eq	1.2.1
coppermine-gallery:coppermine_photo_gallery	coppermine-gallery coppermine photo gallery	eq	1.3.0
coppermine-gallery:coppermine_photo_gallery	coppermine-gallery coppermine photo gallery	eq	1.3.1
coppermine-gallery:coppermine_photo_gallery	coppermine-gallery coppermine photo gallery	eq	1.3.2