CVE-2018-14478

ecard.php in Coppermine Photo Gallery CPG 1.5.46 has XSS via the sendername, recipientemail, greetings, or recipientname parameter...

CVE-2018-14478

creationtimestamp| type| source ---|---|--- 2019-05-07 22:28:12+00:00| seen| https://t.me/cibsecurity/4159...

CVE-2018-14478

ecard.php in Coppermine Photo Gallery CPG 1.5.46 has XSS via the sendername, recipientemail, greetings, or recipientname parameter...

CVE-2018-14478

CVE-2018-14478 affects Coppermine Photo Gallery (CPG) 1.5.46. The vulnerability is a reflected cross-site scripting (XSS) in ecard.php, exploitable via parameters sender_name, recipient_email, greetings, or recipient_name. Attack patterns demonstrated in public advisories show injected scripts in...