527 matches found
Design/Logic Flaw
Coppermine Photo Gallery CPG 1.4.14 does not restrict access to update.php, which allows remote attackers to obtain sensitive information such as the database table prefix via a direct request. NOTE: this might be leveraged for attacks against CVE-2008-0504...
Information disclosure
Coppermine Photo Gallery CPG 1.4.14 allows remote attackers to obtain sensitive information via a direct request to include/slideshow.inc.php, which leaks the installation path in an error message...
CVE-2008-7187
Coppermine Photo Gallery CPG 1.4.14 allows remote attackers to obtain sensitive information via a direct request to include/slideshow.inc.php, which leaks the installation path in an error message...
CVE-2008-7186
Coppermine Photo Gallery CPG 1.4.14 does not restrict access to update.php, which allows remote attackers to obtain sensitive information such as the database table prefix via a direct request. NOTE: this might be leveraged for attacks against CVE-2008-0504...
CVE-2008-7186
Coppermine Photo Gallery (CPG) 1.4.14 exposes update.php to direct requests, allowing remote attackers to obtain sensitive information such as the database table prefix. This is a local information disclosure issue stemming from improper access restriction, and it may be leveraged in connection w...
CVE-2008-7187
The CVE-2008-7187 vulnerability affects Coppermine Photo Gallery (CPG) 1.4.14. A remote attacker can disclose sensitive information by issuing a direct request to include/slideshow.inc.php, which results in an error message that leaks the installation path. The documentation does not provide reme...
Coppermine Photo Gallery GLOBALS[USER[lang] Parameter Local File Inclusion
The version of Coppermine Photo Gallery installed on the remote host fails to filter user-supplied input to the 'GLOBALSUSERlang' parameter of the 'index.php' script before using it to include PHP code in 'includes/init.inc.php'. Provided PHP's 'registerglobals' setting is enabled, an...
Coppermine Photo Gallery 'lang' Cookie参数本地文件包含漏洞
Bugraq ID: 30480 CNCAN ID：CNCAN-2009052002 Coppermine Photo Gallery是一款基于WEB的图库程序。 Coppermine Photo Gallery不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限查看系统文件内容。 在用于包含文件钱传递给"GLOBALSUSERlang"的参数不正确过滤，可导致提交特殊请求以WEB权限查看系统文件内容。 Coppermine Photo Gallery 1.4.22 Coppermine Photo Gallery 1.4.21 Coppermine Photo Gallery...
Coppermine Photo Gallery <= 1.4.22 Remote Exploit
No description provided by source. !/usr/bin/perl Coppermine Photo Gallery = 1.4.22 Remote Exploit Need registerglobals = on and magicquotesgpc = off Based on vulnerabilities discussed at http://www.milw0rm.org/exploits/8713 Coded by girex use LWP::UserAgent; ifnot defined $ARGV0 banner; print "-...
Coppermine Photo Gallery <= 1.4.22 Remote Exploit
Exploit for unknown platform in category web applications ================================================= Coppermine Photo Gallery '; banner; $lwp-defaultheader'Accept-Language: en-us,en;q=0.5'; my $html = injrequest' WHERE x'; Wrong query to obtain an error ifnot defined $html print "- Request...
Coppermine Photo Gallery <= 1.4.22 Multiple Remote Vulnerabilities
No description provided by source. Author: girex Site: http://girex.altervista.org/ CMS: Coppermine Photo Gallery = 1.4.22 Coppermine Foto Gallery suffers from different vulnerabilities. There is a Local File Inclusion and a Blind SQL Injection working with registerglobals = On and magicquotesgpc...
Coppermine Photo Gallery 1.4.22 LFI / SQL Injection
Author: girex Site: http://girex.altervista.org/ CMS: Coppermine Photo Gallery = 1.4.22 Coppermine Foto Gallery suffers from different vulnerabilities. There is a Local File Inclusion and a Blind SQL Injection working with registerglobals = On and magicquotesgpc = Off and a SQL Injection working ...
coppermine photo Gallery 1.4.22 - Multiple Vulnerabilities
Author: girex Site: http://girex.altervista.org/ CMS: Coppermine Photo Gallery $value...
coppermine photo Gallery 1.4.22 - Multiple Vulnerabilities
coppermine photo Gallery 1.4.22 - Multiple Vulnerabilities Author: girex Site: http://girex.altervista.org/ CMS: Coppermine Photo Gallery = 1.4.22 Coppermine Foto Gallery suffers from different vulnerabilities. There is a Local File Inclusion and a Blind SQL Injection working with registerglobals...
Cross site scripting
Cross-site scripting XSS vulnerability in docs/showdoc.php in Coppermine Photo Gallery CPG before 1.4.22 allows remote attackers to inject arbitrary web script or HTML via the css parameter, a different vector than CVE-2008-0505...
CVE-2009-1616
Cross-site scripting XSS vulnerability in docs/showdoc.php in Coppermine Photo Gallery CPG before 1.4.22 allows remote attackers to inject arbitrary web script or HTML via the css parameter, a different vector than CVE-2008-0505...
CVE-2009-1616
The CVE pertains to Coppermine Photo Gallery (CPG) prior to version 1.4.22, where the docs/showdoc.php script fails to sanitize the css parameter, enabling cross-site scripting. The underlying issue is improper input handling that allows injection of arbitrary script/HTML, with the impact describ...
Coppermine Photo Gallery 1.4.21 XSS
Coppermine Photo Gallery 1.4.21 Cross-Site Scripting Author: Gerendi Sandor Attila Date: April 29, 2009 Package: Coppermine Photo Gallery cpg1.4.21 Product homepage: http://coppermine-gallery.net/ Versions Affected: v.1.4.21 older versions are also affected Advisory:...
Coppermine Photo Gallery 1.4.21 Cross-Site Scripting
Coppermine Photo Gallery 1.4.21 Cross-Site Scripting Author: Gerendi Sandor Attila Date: April 29, 2009 Package: Coppermine Photo Gallery cpg1.4.21 Product homepage: http://coppermine-gallery.net/ Versions Affected: v.1.4.21 older versions are also affected Advisory:...
Coppermine Photo Gallery css参数跨站脚本漏洞
BUGTRAQ ID: 34782 Coppermine是用PHP编写的多用途集成Web图形库脚本。 Coppermine的docs/showdoc.php文件没有正确地验证用户所提供的css参数便返回给了用户，远程攻击者可以通过提交恶意请求执行跨站脚本攻击，导致在用户浏览器会话中执行任意HTML和脚本代码。 Coppermine Photo Gallery 1.4.x Coppermine ---------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...