Lucene search

MitreCVE-2015-3921

HistoryMay 27, 2015 - 6:59 p.m.

CVE-2015-3921

2015-05-2718:59:00

CWE-79

mitre

web.nvd.nist.gov

cve-2015-3921

xss

vulnerability

contact.php

coppermine photo gallery

nvd

CVSS2

3.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

AI Score

5.4

Confidence

High

EPSS

0.001

Percentile

46.4%

JSON

Cross-site scripting (XSS) vulnerability in contact.php in Coppermine Photo Gallery before 1.5.36 allows remote authenticated users to inject arbitrary web script or HTML via the referer parameter.

Affected configurations

Nvd

Node

coppermine-gallerycoppermine_photo_galleryRange≤1.5.34

VendorProductVersionCPE
coppermine-gallerycoppermine_photo_gallery*cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
coppermine-gallery	coppermine_photo_gallery	*	cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery::::::::

References

forum.coppermine-gallery.net/index.php/topic%2C78194.0.html

packetstormsecurity.com/files/132004/Coppermine-Gallery-1.5.34-XSS-Open-Redirection.html

www.securityfocus.com/bid/74872

www.securitytracker.com/id/1032558

CVSS2

3.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

AI Score

5.4

Confidence

High

EPSS

0.001

Percentile

46.4%

JSON

Related for CVE-2015-3921