[waraxe-2012-SA#081] - Multiple Vulnerabilities in Coppermine 1.5.18

waraxe-2012-SA081 - Multiple Vulnerabilities in Coppermine 1.5.18 ============================================================================== Author: Janek Vind "waraxe" Date: 29. March 2012 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-81.html Affected Software: Coppermine is a...

Coppermine 1.5.18 Multiple Vulnerabilities

Exploit for php platform in category web applications Author: Janek Vind "waraxe" Date: 29. March 2012 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-81.html Affected Software: Coppermine is a multi-purpose fully-featured and integrated web picture gallery script written in PHP using...

coppermine 1.5.18 - Multiple Vulnerabilities

coppermine 1.5.18 - Multiple Vulnerabilities waraxe-2012-SA081 - Multiple Vulnerabilities in Coppermine 1.5.18 ============================================================================== Author: Janek Vind "waraxe" Date: 29. March 2012 Location: Estonia, Tartu Web:...

Coppermine 1.5.18 Cross Site Scripting / Path Disclosure

waraxe-2012-SA081 - Multiple Vulnerabilities in Coppermine 1.5.18 ============================================================================== Author: Janek Vind "waraxe" Date: 29. March 2012 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-81.html Affected Software: Coppermine is a...

coppermine 1.5.18 - Multiple Vulnerabilities

waraxe-2012-SA081 - Multiple Vulnerabilities in Coppermine 1.5.18 ============================================================================== Author: Janek Vind "waraxe" Date: 29. March 2012 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-81.html Affected Software: Coppermine is a...

coppermine -- Multiple vulnerabilities

The Coppermine Team reports: The release covers several path disclosure vulnerabilities. If unpatched, it's possible to generate an error that will reveal the full path of the script. A remote user can determine the full path to the web root directory and other potentially sensitive information...

CVE-2011-3722

Coppermine Photo Gallery CPG 1.5.12 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by include/inspekt.php and certain other files...

Information disclosure

Coppermine Photo Gallery CPG 1.5.12 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by include/inspekt.php and certain other files...

CVE-2011-3722

CVE-2011-3722 affects Coppermine Photo Gallery (CPG) 1.5.12. The issue allows remote attackers to disclose sensitive information by directly requesting certain PHP files, resulting in an error message that reveals the installation path (illustrated by include/inspekt.php and related files). The e...

CVE-2011-2476

Cross-site scripting XSS vulnerability in Coppermine Photo Gallery CPG before 1.5.12 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2010-4667...

CVE-2010-4667

Cross-site scripting XSS vulnerability in Coppermine Photo Gallery CPG before 1.4.27 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in Coppermine Photo Gallery CPG before 1.5.12 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2010-4667...

Cross site scripting

Cross-site scripting XSS vulnerability in Coppermine Photo Gallery CPG before 1.4.27 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-2476

CVE-2011-2476 describes a cross-site scripting (XSS) vulnerability in Coppermine Photo Gallery (CPG) before 1.5.12 that allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The description explicitly states it is a different issue from CVE-2010-4667. No root-cau...

CVE-2010-4667

Cross-site scripting XSS vulnerability in Coppermine Photo Gallery CPG before 1.4.27 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-2476

Cross-site scripting XSS vulnerability in Coppermine Photo Gallery CPG before 1.5.12 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2010-4667...

CVE-2010-4667

CVE-2010-4667 affects Coppermine Photo Gallery (CPG) prior to version 1.4.27. The vulnerability is a Cross-site Scripting (XSS) issue that allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The official description notes no specifics on vectors, and the connec...

Coppermine Photo Gallery <= 1.5.12 File Upload Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

Coppermine 1.5.12 Path Disclosure

Vulnerability ID: HTB22836 Reference: http://www.htbridge.ch/advisory/pathdisclosureincoppermine.html Product: Coppermine Vendor: The Coppermine Dev Team http://coppermine-gallery.net/ Vulnerable Version: 1.5.12 and probably prior versions Vendor Notification: 03 February 2011 Vulnerability Type:...

HTB22836: Path disclosure in Coppermine

Vulnerability ID: HTB22836 Reference: http://www.htbridge.ch/advisory/pathdisclosureincoppermine.html Product: Coppermine Vendor: The Coppermine Dev Team http://coppermine-gallery.net/ Vulnerable Version: 1.5.12 and probably prior versions Vendor Notification: 03 February 2011 Vulnerability Type:...