CVE-2014-4612

Cross-site scripting XSS vulnerability in the keywords manager keywordmgr.php in Coppermine Photo Gallery before 1.5.27 and 1.6.x before 1.6.01 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the keywords manager keywordmgr.php in Coppermine Photo Gallery before 1.5.27 and 1.6.x before 1.6.01 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-4612

The vulnerability CVE-2014-4612 affects Coppermine Photo Gallery, specifically the keywords manager (keywordmgr.php). It is exploitable via cross-site scripting (XSS) in versions before 1.5.27 and in 1.6.x before 1.6.01. The root cause is an XSS flaw that allows remote attackers to inject arbitra...

Coppermine Gallery Directory Traversal Vulnerability

Coppermine Photo Gallery is a web-based album management system. A directory traversal vulnerability exists in the Coppermine Photo Gallery page "piceditor.php", which can be exploited by an attacker to traverse directory files and obtain sensitive information...

Coppermine Gallery 1.5.44 Directory Traversal

Coppermine Gallery = 1.5.44 directory traversal vulnerability ============================================================== Coppermine is a multi-purpose fully-featured and integrated web picture gallery script written in PHP using GD or ImageMagick as image library with a MySQL backend. A...

Coppermine Gallery 1.5.44 Directory Traversal Vulnerability

Exploit for php platform in category web applications Coppermine Gallery = 1.5.44 directory traversal vulnerability ============================================================== Coppermine is a multi-purpose fully-featured and integrated web picture gallery script written in PHP using GD or...

Coppermine Gallery 1.5.44 - Directory Traversal

Coppermine Gallery 1.5.44 - Directory Traversal Coppermine Gallery = 1.5.44 directory traversal vulnerability ============================================================== Coppermine is a multi-purpose fully-featured and integrated web picture gallery script written in PHP using GD or ImageMagic...

Coppermine Gallery < 1.5.44 - Directory Traversal

Coppermine Gallery = 1.5.44 directory traversal vulnerability ============================================================== Coppermine is a multi-purpose fully-featured and integrated web picture gallery script written in PHP using GD or ImageMagick as image library with a MySQL backend. A...

Coppermine Gallery 1.5.44 Directory Traversal

Coppermine Gallery = 1.5.44 directory traversal vulnerability ============================================================== Coppermine is a multi-purpose fully-featured and integrated web picture gallery script written in PHP using GD or ImageMagick as image library with a MySQL backend. A...

Coppermine 1.5.42: Second-Order Command Execution

RIPS Analysis The analysis with RIPS took only 53 seconds to complete and it uncovered a lot of security vulnerabilities - although most of them require authentication. Nonetheless, these issues are severe because they can be combined with other security vulnerabilities that allow an attacker to...

Coppermine Photo Gallery Cross-Site Scripting Vulnerability

Coppermine Photo Gallery is a Web-based album management system. The system provides user management , album password access restrictions and automatic generation of thumbnails and other functions . A cross-site scripting vulnerability exists in the installclassic.php script of Coppermine Photo...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in installclassic.php in Coppermine Photo Gallery CPG 1.5.36 allow remote attackers to inject arbitrary web script or HTML via the 1 adminusername, 2 adminpassword, 3 adminemail, 4 dbserver, 5 dbname, 6 dbuser, 7 dbpass, 8 tableprefix, or 9 impath...

CVE-2015-6528

CVE-2015-6528 affects Coppermine Photo Gallery (CPG) 1.5.36. The vulnerability is in install_classic.php and allows remote injection of arbitrary script/HTML (XSS) via any of nine parameters: admin_username, admin_password, admin_email, dbserver, dbname, dbuser, dbpass, table_prefix, or impath. T...

Coppermine Photo Gallery 1.5.36 Cross Site Scripting

Exploit Title: Coppermine Photo Gallery 1.5.36 Cross Site Scripting + Exploit Author: Ehsan Hosseini + Date: 27/7/2015 + Vendor Homepage: http://coppermine-gallery.net/ + Software Link: http://sourceforge.net/projects/coppermine/files/Coppermine/1.5.x/cpg1.5.36.zip/download + Version: 1.5.36 +...

Coppermine Photo Gallery Catalog Enumeration Vulnerability

Coppermine Photo Gallery is a web-based album management system. The Coppermine Photo Gallery minibrowser.php script fails to adequately filter the 'folder' parameter, allowing remote attackers to exploit a vulnerability to enumerate directories...

CVE-2015-3923

Coppermine Photo Gallery before 1.5.36 allows remote attackers to enumerate directories via a full path in the folder parameter to minibrowser.php...

Path traversal

Coppermine Photo Gallery before 1.5.36 allows remote attackers to enumerate directories via a full path in the folder parameter to minibrowser.php...

CVE-2015-3923

Coppermine Photo Gallery before 1.5.36 allows remote attackers to enumerate directories via a full path in the folder parameter to minibrowser.php...

CVE-2015-3923

Coppermine Photo Gallery (before 1.5.36) is vulnerable to directory enumeration via the folder parameter in minibrowser.php due to improper filtering, enabling remote attackers to traverse directories. The affected component is Coppermine Photo Gallery, minibrowser.php, with a path traversal issu...

Coppermine Photo Gallery Open Redirect Vulnerability

Coppermine Photo Gallery is a WEB-based graphics gallery management program. An open redirection vulnerability exists in Coppermine Photo Gallery versions prior to 1.5.36, which can be exploited by remote attackers to redirect users to arbitrary web sites and conduct phishing attacks...