CVE-2008-1841

SQL injection vulnerability in the session handling functionality in bridge/coppermine.inc.php in Coppermine Photo Gallery CPG 1.4.17 and earlier allows remote attackers to execute arbitrary SQL commands via an input field associated with the sessionid variable, as exploited in the wild in April...

CVE-2008-1840

SQL injection vulnerability in upload.php in Coppermine Photo Gallery CPG 1.4.16 and earlier allows remote authenticated users or user-assisted remote HTTP servers to execute arbitrary SQL commands via the Content-Type HTTP response header provided by the HTTP server that is used for an upload...

CVE-2008-1841

CVE-2008-1841 is a database-injection vulnerability in Coppermine Photo Gallery (CPG) 1.4.17 and earlier. It affects the session handling in bridge/coppermine.inc.php, allowing remote attackers to execute arbitrary SQL commands via a field tied to the session_id variable; exploitation was reporte...

VulnCheck KEV: CVE-2008-1840

SQL injection vulnerability in upload.php in Coppermine Photo Gallery CPG 1.4.16 and earlier allows remote authenticated users or user-assisted remote HTTP servers to execute arbitrary SQL commands via the Content-Type HTTP response header provided by the HTTP server that is used for an upload...

VulnCheck KEV: CVE-2008-1841

SQL injection vulnerability in the session handling functionality in bridge/coppermine.inc.php in Coppermine Photo Gallery CPG 1.4.17 and earlier allows remote attackers to execute arbitrary SQL commands via an input field associated with the sessionid variable, as exploited in the wild in...

Coppermine Photo Gallery bridge/coppermine.inc.php文件SQL注入漏洞

BUGTRAQ ID: 28767 Coppermine是用PHP编写的多用途集成Web图形库脚本。 Coppermine的coppermine.inc.php文件没有正确地过滤SQL查询中的某些输入，这允许远程攻击者通过操控SQL查询请求执行SQL注入攻击。 Coppermine Photo Gallery 1.4.17 Coppermine ---------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://downloads.sourceforge.net/coppermine/cpg1.4.18.zip...

Coppermine Photo Gallery < 1.4.18 Bridge Wizard Cookie SQL Injection

Binary data 4464.prm...

Coppermine Photo Gallery upload.php文件SQL注入漏洞

BUGTRAQ ID: 28766 Coppermine是用PHP编写的多用途集成web图形库脚本。 Coppermine的upload.php文件处理用户请求数据时存在输入验证漏洞，远程攻击者可能利用此漏洞执行SQL注入攻击。 在执行URI/URL上传时Coppermine的upload.php文件没有正确地过滤远程HTTP服务器的MIME媒体类型输入，这允许远程攻击者通过操控SQL查询请求执行SQL注入攻击。 Coppermine Photo Gallery 1.4.16 临时解决方法： 在upload.php文件中找到以下行： else // We will try to get...

Coppermine Photo Gallery bridge/coppermine.inc.php Bridge Wizard Session Cookie SQL Injection

The version of Coppermine installed on the remote host fails to sanitize user-supplied input to the bridge wizard session cookie before using it in a database query in 'bridge/coppermine.inc.php'. Regardless of PHP's 'magicquotesgpc' setting, an attacker may be able to exploit this issue to...

FreeBSD : coppermine -- multiple vulnerabilities (9f581778-e3d4-11dc-bb89-000bcdc1757a)

Coppermine Security advisory The development team is releasing a security update for Coppermine in order to counter a recently discovered cross-site-scripting vulnerability. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...

Coppermine Photo Gallery album Password Cookie SQL Injection

The version of Coppermine installed on the remote host fails to sanitize user-supplied input to the album password cookie before using it in a database query in the 'getprivatealbumset' function in 'include/functions.inc.php'. Regardless of PHP's 'magicquotesgpc' setting, an attacker may be able ...

waraxe-2008-SA066.txt

waraxe-2008-SA066 - Multiple Vulnerabilities in Coppermine 1.4.14 =============================================================================== Author: Janek Vind "waraxe" Date: 31. January 2008 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-66.html Target software description:...

Immunity Canvas: COPPERMINE

Name| coppermine ---|--- CVE| CVE-2008-0506 Exploit Pack| CANVAS Description| coppermine Notes| CVE Name: CVE-2008-0506 VENDOR: Coppermine URL: http://www.milw0rm.com/exploits/5019 Repeatability: Infinite CVE Url: https://vulners.com/cve/CVE-2008-0506 CVSS: 6.8...

Sql injection

Multiple SQL injection vulnerabilities in Coppermine Photo Gallery CPG before 1.4.15 allow remote authenticated administrators to execute arbitrary SQL commands via the 1 albumid, 2 startpic, and 3 numpics parameters to util.php; and 4 cidarray parameter to reviewcom.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in docs/showdoc.php in Coppermine Photo Gallery CPG before 1.4.15 allow remote attackers to inject arbitrary web script or HTML via the 1 h and 2 t parameters...

Code injection

include/imageObjectIM.class.php in Coppermine Photo Gallery CPG before 1.4.15, when the ImageMagick picture processing method is configured, allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 quality, 2 angle, or 3 clipval parameter to picEditor.php...

CVE-2008-0504

Multiple SQL injection vulnerabilities in Coppermine Photo Gallery CPG before 1.4.15 allow remote authenticated administrators to execute arbitrary SQL commands via the 1 albumid, 2 startpic, and 3 numpics parameters to util.php; and 4 cidarray parameter to reviewcom.php...

CVE-2008-0505

Multiple cross-site scripting XSS vulnerabilities in docs/showdoc.php in Coppermine Photo Gallery CPG before 1.4.15 allow remote attackers to inject arbitrary web script or HTML via the 1 h and 2 t parameters...

CVE-2008-0504

Coppermine Photo Gallery (CPG) prior to version 1.4.15 contains multiple SQL injection flaws that can be triggered by an authenticated remote administrator via parameters (albumid, startpic, numpics) to util.php and cid_array to reviewcom.php. The underlying issue is insufficient input validation...

CVE-2008-0505

Multiple cross-site scripting XSS vulnerabilities in docs/showdoc.php in Coppermine Photo Gallery CPG before 1.4.15 allow remote attackers to inject arbitrary web script or HTML via the 1 h and 2 t parameters...