CVE-2008-0505

2008-01-3120:00:00

CWE-79

[email protected]

web.nvd.nist.gov

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.7

Confidence

High

EPSS

0.003

Percentile

66.4%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in docs/showdoc.php in Coppermine Photo Gallery (CPG) before 1.4.15 allow remote attackers to inject arbitrary web script or HTML via the (1) h and (2) t parameters.

Affected configurations

Nvd

Node

copperminecoppermine_photo_galleryRange≤1.4.14

copperminecoppermine_photo_galleryMatch1.4.10

copperminecoppermine_photo_galleryMatch1.4.11

copperminecoppermine_photo_galleryMatch1.4.12

copperminecoppermine_photo_galleryMatch1.4.13

VendorProductVersionCPE
copperminecoppermine_photo_gallery*cpe:2.3:a:coppermine:coppermine_photo_gallery:*:*:*:*:*:*:*:*
copperminecoppermine_photo_gallery1.4.10cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4.10:*:*:*:*:*:*:*
copperminecoppermine_photo_gallery1.4.11cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4.11:*:*:*:*:*:*:*
copperminecoppermine_photo_gallery1.4.12cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4.12:*:*:*:*:*:*:*
copperminecoppermine_photo_gallery1.4.13cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4.13:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
coppermine	coppermine_photo_gallery	*	cpe:2.3:a:coppermine:coppermine_photo_gallery::::::::
coppermine	coppermine_photo_gallery	1.4.10	cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4.10:::::::*
coppermine	coppermine_photo_gallery	1.4.11	cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4.11:::::::*
coppermine	coppermine_photo_gallery	1.4.12	cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4.12:::::::*
coppermine	coppermine_photo_gallery	1.4.13	cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4.13:::::::*