Coppermine Photo Gallery 1.5.x Command Execution

|| || | || o,7 || . o7 || 4||| ow, : / / . +----------------------------------------------------------------------- -+ | ....... | | ..''xxxxxxxxxxxxxxx'... | | ..'xxxxxxxxxxxxxxxxxxxxxxxxxxx.. | | ..'xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx'. | | .'xxxxxxxxxxxxxxxxxxxxxxxxxxxx'''.......'. | |...

Installation Path Disclosure Weakness in Coppermine

High-Tech Bridge SA Security Research Lab has discovered a weakness in Coppermine which could be exploited to gain access to potentially sensitive information. 1 Installation path disclosure weakness in Coppermine The weakness exists due to application reveals the full path to installation...

CVE-2010-4693

Multiple cross-site scripting XSS vulnerabilities in Coppermine Photo Gallery 1.5.10 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 h and 2 t parameters to help.php, or 3 picfileXXX parameter to searchnew.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Coppermine Photo Gallery 1.5.10 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 h and 2 t parameters to help.php, or 3 picfileXXX parameter to searchnew.php...

CVE-2010-4693

Multiple cross-site scripting XSS vulnerabilities in Coppermine Photo Gallery 1.5.10 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 h and 2 t parameters to help.php, or 3 picfileXXX parameter to searchnew.php...

CVE-2010-4693

Coppermine Photo Gallery 1.5.10 and earlier are affected by multiple cross-site scripting (XSS) vulnerabilities due to insufficient sanitization of user-supplied input. Exploitable via the h and t parameters to help.php, or via picfile_XXX parameters to searchnew.php, allowing attackers to inject...

Coppermine Photo Gallery Multiple XSS Vulnerabilities

Coppermine Photo Gallery is prone to multiple cross-site scripting XSS vulnerabilities because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

Coppermine Photo Gallery Multiple Cross Site Scripting Vulnerabilities

Coppermine Photo Gallery is prone to multiple cross-site-scripting vulnerabilities because it fails to properly sanitize user- supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This ma...

[waraxe-2010-SA#079] - Reflected XSS in Coppermine 1.5.10

waraxe-2010-SA079 - Reflected XSS in Coppermine 1.5.10 ============================================================================== Author: Janek Vind "waraxe" Date: 28. December 2010 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-79.html Affected Software: Coppermine is a...

Coppermine 1.5.10 Cross Site Scripting

waraxe-2010-SA079 - Reflected XSS in Coppermine 1.5.10 ============================================================================== Author: Janek Vind "waraxe" Date: 28. December 2010 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-79.html Affected Software: Coppermine is a...

Coppermine Photo Gallery 1.5.10 - searchnew.php Cross-Site Scripting

Coppermine Photo Gallery 1.5.10 - searchnew.php Cross-Site Scripting source: https://www.securityfocus.com/bid/45600/info Coppermine Photo Gallery is prone to multiple cross-site-scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these...

Coppermine Photo Gallery 1.5.10 - help.php Cross-Site Scripting

Coppermine Photo Gallery 1.5.10 - help.php Cross-Site Scripting source: https://www.securityfocus.com/bid/45600/info Coppermine Photo Gallery is prone to multiple cross-site-scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues ...

Coppermine Photo Gallery 1.5.10 - 'searchnew.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/45600/info Coppermine Photo Gallery is prone to multiple cross-site-scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecti...

Coppermine Photo Gallery 1.5.10 - 'help.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/45600/info Coppermine Photo Gallery is prone to multiple cross-site-scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecti...

Поиск уязвимостей в веб приложениях

В этой статье я собрал интересные на мой взгляд ошибки в php скриптах. Но для начала, описание некоторых параметров PHP-интерпретатора: Цитата: registerglobals = ON - все переменные регистрируются как глобальные; magicquotesgpc = ON - в массивах POST, GET, COOKIE экранируются кавычки и опасные...

Coppermine Photo Gallery 1.4.14 - 'picEditor.php' Command Execution (Metasploit)

$Id: copperminepiceditor.rb 9671 2010-07-03 06:21:31Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Coppermine Photo Gallery picEditor.php Command Execution

This module exploits a vulnerability in the picEditor.php script of Coppermine Photo Gallery versions 1.4.14 and earlier. When configured to use the ImageMagick library, the 'quality', 'angle', and 'clipval' parameters are not properly escaped before being passed to the PHP 'exec' command. In ord...

Coppermine Photo Gallery remote command execution vulnerability-vulnerability warning-the black bar safety net

Affected system: Coppermine Photo Gallery 1.4.14 Tested 1.4.14 the many versions of the Universal Not affected system: Coppermine Photo Gallery 1.4.15 Description: BUGTRAQ ID: 2 7 5 1 2 Coppermine is PHP-written multi-purpose, integrated web graphics library scripts. Coppermine in processing the...

CVE-2008-7186

Coppermine Photo Gallery CPG 1.4.14 does not restrict access to update.php, which allows remote attackers to obtain sensitive information such as the database table prefix via a direct request. NOTE: this might be leveraged for attacks against CVE-2008-0504...

CVE-2008-7187

Coppermine Photo Gallery CPG 1.4.14 allows remote attackers to obtain sensitive information via a direct request to include/slideshow.inc.php, which leaks the installation path in an error message...