Cross site scripting

Cross-site scripting XSS vulnerability in displayecard.php in Coppermine Photo Gallery CPG before 1.4.14 allows remote attackers to inject arbitrary web script or HTML via the data parameter...

CVE-2007-5888

Cross-site scripting XSS vulnerability in displayecard.php in Coppermine Photo Gallery CPG before 1.4.14 allows remote attackers to inject arbitrary web script or HTML via the data parameter...

CVE-2007-5888

Cross-site scripting XSS vulnerability in displayecard.php in Coppermine Photo Gallery CPG before 1.4.14 allows remote attackers to inject arbitrary web script or HTML via the data parameter...

coppermine -- multiple vulnerabilities

Coppermine Security advisory The development team is releasing a security update for Coppermine in order to counter a recently discovered cross-site-scripting vulnerability...

FreeBSD : coppermine -- multiple vulnerabilities (12488805-6773-11dc-8be8-02e0185f8d72)

The coppermine development team reports two vulnerabilities with the coppermine application. These vulnerabilities are caused by improper checking of the log variable in 'viewlog.php' and improper checking of the referer variable in 'mode.php'. This could allow local file inclusion, potentially...

Directory traversal

Directory traversal vulnerability in viewlog.php in Coppermine Photo Gallery CPG 1.4.12 and earlier allows remote authenticated administrators to include and execute arbitrary local files via a .. dot dot in the log parameter...

CVE-2007-4976

Directory traversal vulnerability in viewlog.php in Coppermine Photo Gallery CPG 1.4.12 and earlier allows remote authenticated administrators to include and execute arbitrary local files via a .. dot dot in the log parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in mode.php in Coppermine Photo Gallery CPG 1.4.12 and earlier allows remote attackers to inject arbitrary web script or HTML via the referer parameter...

CVE-2007-4977

Cross-site scripting XSS vulnerability in mode.php in Coppermine Photo Gallery CPG 1.4.12 and earlier allows remote attackers to inject arbitrary web script or HTML via the referer parameter...

CVE-2007-4977

Cross-site scripting XSS vulnerability in mode.php in Coppermine Photo Gallery CPG 1.4.12 and earlier allows remote attackers to inject arbitrary web script or HTML via the referer parameter...

CVE-2007-4977

CVE-2007-4977 concerns Coppermine Photo Gallery (CPG) prior to (and including) 1.4.12. The issue is an XSS in mode.php via the referer parameter, as described in the CVE entry and echoed in connected reports. The root cause is improper checking of the referer variable in mode.php, enabling inject...

CVE-2007-4976

CVE-2007-4976 involves a directory traversal in Coppermine Photo Gallery (CPG) prior to or including 1.4.12. The flaw is in viewlog.php: an unsafely handled log parameter can be exploited to include and execute arbitrary local files by using ".." (dot dot). The vulnerability requires authenticati...

CVE-2007-4976

Directory traversal vulnerability in viewlog.php in Coppermine Photo Gallery CPG 1.4.12 and earlier allows remote authenticated administrators to include and execute arbitrary local files via a .. dot dot in the log parameter...

Coppermine <= 1.4.12 Cross Site Scripting and Local File Inclusion

============================================================ Coppermine = 1.4.12 Cross Site Scripting and Local File Inclusion ============================================================ Author: L4teral l4teral 4t gmail com Impact: Cross Site Scripting/Local File Inclusion Status: patch availabl...

coppermine1412-xss.txt

============================================================ Coppermine Impact: Cross Site Scripting/Local File Inclusion Status: patch available ------------------------------ Affected software description: ------------------------------ Application: Coppermine Photo Gallery Version: = 1.4.12...

Coppermine Photo Gallery 1.4.12 - log Local File Inclusion

Coppermine Photo Gallery 1.4.12 - log Local File Inclusion source: https://www.securityfocus.com/bid/25698/info Coppermine Photo Gallery is prone to a cross-site scripting issue and a local file-include issue. Attackers can exploit these issues to steal cookie-based authentication credentials,...

Coppermine Photo Gallery 1.4.12 - 'referer' Cross-Site Scripting

source: https://www.securityfocus.com/bid/25698/info Coppermine Photo Gallery is prone to a cross-site scripting issue and a local file-include issue. Attackers can exploit these issues to steal cookie-based authentication credentials, execute arbitrary code, and retrieve arbitrary content within...

Coppermine Photo Gallery 1.4.12 - 'log' Local File Inclusion

source: https://www.securityfocus.com/bid/25698/info Coppermine Photo Gallery is prone to a cross-site scripting issue and a local file-include issue. Attackers can exploit these issues to steal cookie-based authentication credentials, execute arbitrary code, and retrieve arbitrary content within...

Coppermine Photo Gallery 1.4.12 - referer Cross-Site Scripting

Coppermine Photo Gallery 1.4.12 - referer Cross-Site Scripting source: https://www.securityfocus.com/bid/25698/info Coppermine Photo Gallery is prone to a cross-site scripting issue and a local file-include issue. Attackers can exploit these issues to steal cookie-based authentication credentials...

coppermine -- multiple vulnerabilities

The coppermine development team reports two vulnerabilities with the coppermine application. These vulnerabilities are caused by improper checking of the log variable in "viewlog.php" and improper checking of the referer variable in "mode.php". This could allow local file inclusion, potentially...