CVE-2006-4321

PHP remote file inclusion vulnerability in cpg.php in the Coppermine Photo Gallery component comcpg 1.0 and earlier for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

CVE-2006-4321

CVE-2006-4321 describes a PHP remote file inclusion in Coppermine Photo Gallery (component com_cpg) 1.0 and earlier for Mambo. An attacker can supply a URL via mosConfig_absolute_path to cause the application to include remote PHP code, enabling arbitrary code execution. The NVD entry notes a CVS...

coppermine122.txt

---------------------------------------------------- Coppermine Photo Gallery v1.2.2b-Nuke Remote File Inclusion Vulnerabilities ---------------------------------------------------- Discovered By A-S-T TEAM WE ARE CrAsHoVeRrIdE & BLACK-CODE & MR-HCR...

Coppermine Photo Gallery v1.2.2b-Nuke Remote File Inclusion Vulnerabilities

---------------------------------------------------- Coppermine Photo Gallery v1.2.2b-Nuke Remote File Inclusion Vulnerabilities ---------------------------------------------------- Discovered By A-S-T TEAM WE ARE CrAsHoVeRrIdE & BLACK-CODE & MR-HCR...

[KAPDA]Coppermine 1.4.8~Parameter Cleanup System ByPass~Registering Global Varables

ORIGINAL ADVISORY: http://myimei.com/security/2006-06-20/coppermine-148parameter-cleanup-system-bypassregistering-global-varables.html VENDOR INFORMED ——————-Summary—————- Software: CPG Coppermine Photo Gallery Sowtware’s Web Site: http://coppermine.sourceforge.net/ Versions: 1.4.8.stable Class:...

CVE-2006-3064

SQL injection vulnerability in the addhit function in include/function.inc.php in Coppermine Photo Gallery CPG 1.4.8, when "Keep detailed hit statistics" is enabled, allows remote attackers to execute arbitrary SQL commands via the 1 referer and 2 user-agent HTTP headers...

CVE-2006-3064

The CVE-2006-3064 entry affects Coppermine Photo Gallery (CPG) 1.4.8; a SQL injection exists in the add_hit function within include/function.inc.php when Keep detailed hit statistics is enabled. Remote attackers can potentially execute arbitrary SQL commands by supplying crafted values in the Ref...

CVE-2006-3064

SQL injection vulnerability in the addhit function in include/function.inc.php in Coppermine Photo Gallery CPG 1.4.8, when "Keep detailed hit statistics" is enabled, allows remote attackers to execute arbitrary SQL commands via the 1 referer and 2 user-agent HTTP headers...

[KAPDA::48]CopperminePhotoGallery1.4.8~ addhit() function~ SQLinjection attack

ORIGINAL ADVISORY: http://myimei.com/security/2006-06-11/copperminephotogallery148-addhit-function-sqlinjection-attack.html HTTP://KAPDA.IR ——-Summary——- Software: CPG Coppermine Photo Gallery Software’s Web Site: http://coppermine.sourceforge.net/ Versions: 1.4.8.stable Class: Remote Status:...

CVE-2006-2976

Unspecified vulnerability in usermgr.php in Coppermine Photo Gallery before 1.4.7 has unknown impact and remote attack vectors, possibly related to authorization/authentication errors...

CVE-2006-2976

CVE-2006-2976 affects Coppermine Photo Gallery, specifically the file usermgr.php, with the vulnerability present in releases prior to 1.4.7. The available documents describe an unspecified vulnerability with unknown impact and remote attack vectors, potentially tied to authorization/authenticati...

CVE-2006-2976

Unspecified vulnerability in usermgr.php in Coppermine Photo Gallery before 1.4.7 has unknown impact and remote attack vectors, possibly related to authorization/authentication errors...

[SA20465] Coppermine Photo Gallery usermgr.php Unspecified Vulnerability

---------------------------------------------------------------------- Want to join the Secunia Security Team? Secunia offers a position as a security specialist, where your daily work involves reverse engineering of software and exploit code, auditing of source code, and analysis of vulnerabilit...

FreeBSD : coppermine -- File Inclusion Vulnerabilities (77cceaef-e9a4-11da-b9f4-00123ffe8333)

Secunia reports : Coppermine Photo Gallery have a vulnerability, which can be exploited by malicious people and by malicious users to compromise a vulnerable system. 1 Input passed to the 'lang' parameter in include/init.inc.php isn't properly verified, before it is used to include files. This ca...

FreeBSD : coppermine -- Multiple File Extensions Vulnerability (0b628470-e9a6-11da-b9f4-00123ffe8333)

Secunia reports : Coppermine Photo Gallery have a vulnerability, which can be exploited by malicious users to compromise a vulnerable system. The vulnerability is caused due to an error in the handling of file uploads where a filename has multiple file extensions. This can be exploited to upload...

FreeBSD : coppermine -- 'file' Local File Inclusion Vulnerability (6738977b-e9a5-11da-b9f4-00123ffe8333)

Secunia reports : Coppermine Photo Gallery have a vulnerability, which can be exploited by malicious people to disclose sensitive information. Input passed to the 'file' parameter in 'index.php' isn't properly verified, before it is used to include files. This can be exploited to include arbitrar...

Code injection

Coppermine galleries before 1.4.6, when running on Apache with modmime installed, allows remote attackers to upload arbitrary files via a filename with multiple file extensions...

CVE-2006-2514

Coppermine galleries before 1.4.6, when running on Apache with modmime installed, allows remote attackers to upload arbitrary files via a filename with multiple file extensions...

CVE-2006-2514

CVE-2006-2514 affects Coppermine galleries prior to version 1.4.6 when run on Apache with the mod_mime module. The vulnerability allows remote attackers to upload arbitrary files by using a filename containing multiple extensions, enabling potential arbitrary file upload. The core issue is the ha...

CVE-2006-2514

Coppermine galleries before 1.4.6, when running on Apache with modmime installed, allows remote attackers to upload arbitrary files via a filename with multiple file extensions...