CVE-2008-0504

Multiple SQL injection vulnerabilities in Coppermine Photo Gallery CPG before 1.4.15 allow remote authenticated administrators to execute arbitrary SQL commands via the 1 albumid, 2 startpic, and 3 numpics parameters to util.php; and 4 cidarray parameter to reviewcom.php...

CVE-2008-0505

CVE-2008-0505 affects Coppermine Photo Gallery: multiple XSS in docs/showdoc.php before 1.4.15. Attacks inject arbitrary script/HTML via the h and t parameters. Impact is user-visible content tampering; no patch details are provided in the supplied documents. Affected version range and remediatio...

CVE-2008-0506

CVE-2008-0506 affects Coppermine Photo Gallery (CPG) implemention, specifically picEditor.php when using ImageMagick. The vulnerability arises because the (quality, angle, clipval) parameters are not properly escaped before passing to PHP exec, allowing remote command execution via shell metachar...

Coppermine imageObjectIM.class.php Command Execution Vulnerabilities

The version of Coppermine Photo Gallery installed on the remote host fails to sanitize user input to the 'quality', 'angle' and 'clipval' parameters of the 'picEditor.php' script before using it in 'exec' statements to call ImageMagick to process new images. An unauthenticated, remote attacker ca...

[waraxe-2008-SA#066] - Multiple Vulnerabilities in Coppermine 1.4.14

waraxe-2008-SA066 - Multiple Vulnerabilities in Coppermine 1.4.14 =============================================================================== Author: Janek Vind "waraxe" Date: 31. January 2008 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-66.html Target software description:...

waraxe-2008-SA065.txt

waraxe-2008-SA065 - Remote Shell Command Execution in Coppermine 1.4.14 =============================================================================== Author: Janek Vind "waraxe" Date: 30. January 2008 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-65.html Target software descriptio...

Coppermine Photo Gallery 1.4.14 Remote Command Execution Exploit

No description provided by source. waraxe-2008-SA065 - Remote Shell Command Execution in Coppermine 1.4.14 =============================================================================== Author: Janek Vind "waraxe" Date: 30. January 2008 Location: Estonia, Tartu Web:...

Coppermine Photo Gallery 1.4.14 - Remote Command Execution

waraxe-2008-SA065 - Remote Shell Command Execution in Coppermine 1.4.14 =============================================================================== Author: Janek Vind "waraxe" Date: 30. January 2008 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-65.html Target software descriptio...

[waraxe-2008-SA#065] - Remote Shell Command Execution in Coppermine 1.4.14

waraxe-2008-SA065 - Remote Shell Command Execution in Coppermine 1.4.14 =============================================================================== Author: Janek Vind "waraxe" Date: 30. January 2008 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-65.html Target software descriptio...

Coppermine Photo Gallery 1.4.14 - Remote Command Execution

Coppermine Photo Gallery 1.4.14 - Remote Command Execution waraxe-2008-SA065 - Remote Shell Command Execution in Coppermine 1.4.14 =============================================================================== Author: Janek Vind "waraxe" Date: 30. January 2008 Location: Estonia, Tartu Web:...

Coppermine Photo Gallery 1.4.14 Remote Command Execution Exploit

Exploit for unknown platform in category web applications ================================================================ Coppermine Photo Gallery 1.4.14 Remote Command Execution Exploit ================================================================ waraxe-2008-SA065 - Remote Shell Command...

cpg1414-sql.txt

table prefix\n"; print " - hostname\n"; print " - web dirname \n"; print " - force mode - '0' - for Off or "album number" for force mode On \n"; print " table prefix - prefix of sql tables\n"; print " example: " . $argv0 . " coppermine.site photo/ 1 cpg1410\n"; credits; / FUNCTIONS / if...

Coppermine Photo Gallery <= 1.4.14 Remote SQL Injection Exploit

No description provided by source. ?php RST/GHC PRIVATE CPG 1.4.10 sql injection exploit Date: 17.05.07 bug: SQL injection in private album function through array indexes with COOKIE errorreporting EERROR; iniset"maxexecutiontime",0; intro; if $argc 4 print " Usage: " . $argv0 . " host dir force...

Coppermine Photo Gallery < 1.4.11 Album Password Cookie SQL Injection

Binary data 4351.prm...

cpg-sql.txt

toHex$sql . ', ' . $this-toHex'bazik' . ' LIMIT 1,1/'; $b1 = 'bazik'; $a2 = $sql; $b2 = 'bazik'; $arr = array$a1 = $b1, $a2 = $b2; return $this-GLOBALS'prefix' . 'albpw=' . rawurlencodeserialize$arr; function toHex$str for $i=0; $i GLOBALS'host', 80, $errno, $errstr, 30; if!$fp die"- Can't connec...

Coppermine Photo Gallery 1.4.10 Remote SQL Injection Exploit

No description provided by source. ?php Coppermine gallery SQL injection exploit based on RST/GHC bugs Author: bazik, icq 178377 errorreporting0; class cpg1410xek public $GLOBALS = array; function prepareExp$sql $a1 = '1 UNION SELECT ' . $this-toHex$sql . ', ' . $this-toHex'bazik' . ' LIMIT 1,1/'...

Coppermine Photo Gallery 1.4.10 - SQL Injection

table prefix\n"; print " - hostname\n"; print " - web dirname \n"; print " - force mode - '0' - for Off or "album number" for force mode On \n"; print " table prefix - prefix of sql tables\n"; print " example: " . $argv0 . " coppermine.site photo/ 1 cpg1410\n"; credits; / FUNCTIONS / if...

Coppermine Photo Gallery 1.4.10 Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================ Coppermine Photo Gallery 1.4.10 Remote SQL Injection Exploit ============================================================ toHex$sql . ', ' . $this-toHex'bazik' . ' LIMIT 1,1/'; $...

Coppermine Photo Gallery 1.4.10 - 'cpg1410_xek.php' SQL Injection

toHex$sql . ', ' . $this-toHex'bazik' . ' LIMIT 1,1/'; $b1 = 'bazik'; $a2 = $sql; $b2 = 'bazik'; $arr = array$a1 = $b1, $a2 = $b2; return $this-GLOBALS'prefix' . 'albpw=' . rawurlencodeserialize$arr; function toHex$str for $i=0; $i GLOBALS'host', 80, $errno, $errstr, 30; if!$fp die"- Can't connec...

Coppermine Photo Gallery 1.4.10 - cpg1410_xek.php SQL Injection

Coppermine Photo Gallery 1.4.10 - cpg1410xek.php SQL Injection toHex$sql . ', ' . $this-toHex'bazik' . ' LIMIT 1,1/'; $b1 = 'bazik'; $a2 = $sql; $b2 = 'bazik'; $arr = array$a1 = $b1, $a2 = $b2; return $this-GLOBALS'prefix' . 'albpw=' . rawurlencodeserialize$arr; function toHex$str for $i=0; $i...