Coppermine Photo Gallery 1.3.x Remote Blind SQL Injection Exploit

No description provided by source. "; $j = 1; $user = ""; while!strstr$user,chr0 for$x=0;$x255;$x++ $xpl = "'' OR 1=SELECT IFASCIISUBSTRINGusername,".$j.",1=".$x.",1,0 FROM&...

coppermine-blindsql.txt

"; $j = 1; $user = ""; while!strstr$user,chr0 for$x=0;$x "; $a = 1; $pass = ""; while!strstr$pass,chr0...

Sql injection

SQL injection vulnerability in thumbnails.php in Coppermine Photo Gallery CPG 1.3.x allows remote authenticated users to execute arbitrary SQL commands via a cpg131fav cookie. NOTE: it was later reported that 1.4.10, 1.4.14, and other 1.4.x versions are also affected using similar cookies...

CVE-2007-1107

SQL injection vulnerability in thumbnails.php in Coppermine Photo Gallery CPG 1.3.x allows remote authenticated users to execute arbitrary SQL commands via a cpg131fav cookie. NOTE: it was later reported that 1.4.10, 1.4.14, and other 1.4.x versions are also affected using similar cookies...

CVE-2007-1107

SQL injection vulnerability in thumbnails.php in Coppermine Photo Gallery CPG 1.3.x allows remote authenticated users to execute arbitrary SQL commands via a cpg131fav cookie. NOTE: it was later reported that 1.4.10, 1.4.14, and other 1.4.x versions are also affected using similar cookies...

CVE-2007-1107

Coppermine Photo Gallery (CPG) 1.3.x is vulnerable to a SQL injection via the cpg131_fav cookie, allowing remote authenticated users to execute arbitrary SQL commands. The issue was later reported to affect 1.4.x versions (e.g., 1.4.10, 1.4.14) using similar cookies. A Nessus entry additionally n...

Coppermine Photo Gallery 1.3.x Remote Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================================= Coppermine Photo Gallery 1.3.x Remote Blind SQL Injection Exploit ================================================================= "; $j = 1; $user = "";...

Coppermine Photo Gallery 1.3.x - Blind SQL Injection

Coppermine Photo Gallery 1.3.x - Blind SQL Injection "; $j = 1; $user = ""; while!strstr$user,chr0 for$x=0;$x "; $a = 1; $pass = ""; while!strstr$pass,chr0 for$i=0;$i255;$i++ $xpl = "''...

Coppermine Photo Gallery 1.3.x - Blind SQL Injection

"; $j = 1; $user = ""; while!strstr$user,chr0 for$x=0;$x "; $a = 1; $pass = ""; while!strstr$pass,chr0 for$i=0;$i255;$i++ $xpl = "'' OR 1=SELECT IFASCIISUBSTRINGuserpassword,".$a...

CVE-2007-0835

admin.php in Coppermine Photo Gallery 1.4.10, and possibly earlier, allows remote authenticated users to execute arbitrary shell commands via shell metacharacters ";" semicolon in the "Command line options for ImageMagick" form field, when used as an option to ImageMagick's convert command. NOTE:...

Path traversal

admin.php in Coppermine Photo Gallery 1.4.10, and possibly earlier, allows remote authenticated users to include arbitrary local and possibly remote files via the 1 "Path to custom header include" and 2 "Path to custom footer include" form fields. NOTE: The provenance of this information is...

CVE-2007-0836

admin.php in Coppermine Photo Gallery 1.4.10, and possibly earlier, allows remote authenticated users to include arbitrary local and possibly remote files via the 1 "Path to custom header include" and 2 "Path to custom footer include" form fields. NOTE: The provenance of this information is...

CVE-2007-0835

admin.php in Coppermine Photo Gallery 1.4.10, and possibly earlier, allows remote authenticated users to execute arbitrary shell commands via shell metacharacters ";" semicolon in the "Command line options for ImageMagick" form field, when used as an option to ImageMagick's convert command. NOTE:...

CVE-2007-0836

admin.php in Coppermine Photo Gallery 1.4.10, and possibly earlier, allows remote authenticated users to include arbitrary local and possibly remote files via the 1 "Path to custom header include" and 2 "Path to custom footer include" form fields. NOTE: The provenance of this information is...

CVE-2007-0835

The CVE-2007-0835 entry applies to Coppermine Photo Gallery 1.4.10 (and possibly earlier). It describes a remote command-injection vulnerability where an authenticated user can execute arbitrary shell commands by injecting shell metacharacters (a semicolon) into the ImageMagick-related input fiel...

CVE-2007-0836

CVE-2007-0836 affects Coppermine Photo Gallery 1.4.10 (and possibly earlier). The issue allows remote authenticated users to include arbitrary local and possibly remote files through the “Path to custom header include” and “Path to custom footer include” fields in admin.php. The underlying flaw i...

Coppermine Photo Gallery 1.4.10 - Multiple Local/Remote File Inclusions

source: https://www.securityfocus.com/bid/22409/info Coppermine Photo Gallery is prone to multiple remote and local file-include vulnerabilities because it fails to sufficiently sanitize user-supplied input. An attacker can exploit these issues to execute arbitrary PHP code in the context of the...

CVE-2007-0115

Static code injection vulnerability in Coppermine Photo Gallery 1.4.10 and earlier allows remote authenticated administrators to execute arbitrary PHP code via the Username to login.php, which is injected into an error message in security.log.php, which can then be accessed using viewlog.php...

Code injection

Static code injection vulnerability in Coppermine Photo Gallery 1.4.10 and earlier allows remote authenticated administrators to execute arbitrary PHP code via the Username to login.php, which is injected into an error message in security.log.php, which can then be accessed using viewlog.php...

Sql injection

Multiple SQL injection vulnerabilities in Coppermine Photo Gallery 1.4.10 and earlier allow remote authenticated administrators to execute arbitrary SQL commands via 1 the cat parameter to albmgr.php, and possibly 2 the gid parameter to usermgr.php; 3 the start parameter to dbecard.php; and the...