CVE-2005-1172

2005-05-0204:00:00

[email protected]

web.nvd.nist.gov

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.6

Confidence

High

EPSS

0.002

Percentile

64.9%

JSON

Cross-site scripting (XSS) vulnerability in init.inc.php in Coppermine Photo Gallery 1.3.x allows remote attackers to inject arbitrary web script or HTML via the X-Forwarded-For parameter.

Affected configurations

Nvd

Node

copperminecoppermine_photo_galleryMatch1.0_rc3

copperminecoppermine_photo_galleryMatch1.1_.0

copperminecoppermine_photo_galleryMatch1.1_beta_2

copperminecoppermine_photo_galleryMatch1.2

copperminecoppermine_photo_galleryMatch1.2.1

copperminecoppermine_photo_galleryMatch1.2.2_b

copperminecoppermine_photo_galleryMatch1.3

VendorProductVersionCPE
copperminecoppermine_photo_gallery1.0_rc3cpe:2.3:a:coppermine:coppermine_photo_gallery:1.0_rc3:*:*:*:*:*:*:*
copperminecoppermine_photo_gallery1.1_.0cpe:2.3:a:coppermine:coppermine_photo_gallery:1.1_.0:*:*:*:*:*:*:*
copperminecoppermine_photo_gallery1.1_beta_2cpe:2.3:a:coppermine:coppermine_photo_gallery:1.1_beta_2:*:*:*:*:*:*:*
copperminecoppermine_photo_gallery1.2cpe:2.3:a:coppermine:coppermine_photo_gallery:1.2:*:*:*:*:*:*:*
copperminecoppermine_photo_gallery1.2.1cpe:2.3:a:coppermine:coppermine_photo_gallery:1.2.1:*:*:*:*:*:*:*
copperminecoppermine_photo_gallery1.2.2_bcpe:2.3:a:coppermine:coppermine_photo_gallery:1.2.2_b:*:*:*:*:*:*:*
copperminecoppermine_photo_gallery1.3cpe:2.3:a:coppermine:coppermine_photo_gallery:1.3:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
coppermine	coppermine_photo_gallery	1.0_rc3	cpe:2.3:a:coppermine:coppermine_photo_gallery:1.0_rc3:::::::*
coppermine	coppermine_photo_gallery	1.1_.0	cpe:2.3:a:coppermine:coppermine_photo_gallery:1.1_.0:::::::*
coppermine	coppermine_photo_gallery	1.1_beta_2	cpe:2.3:a:coppermine:coppermine_photo_gallery:1.1_beta_2:::::::*
coppermine	coppermine_photo_gallery	1.2	cpe:2.3:a:coppermine:coppermine_photo_gallery:1.2:::::::*
coppermine	coppermine_photo_gallery	1.2.1	cpe:2.3:a:coppermine:coppermine_photo_gallery:1.2.1:::::::*
coppermine	coppermine_photo_gallery	1.2.2_b	cpe:2.3:a:coppermine:coppermine_photo_gallery:1.2.2_b:::::::*
coppermine	coppermine_photo_gallery	1.3	cpe:2.3:a:coppermine:coppermine_photo_gallery:1.3:::::::*