Cross-site Scripting (XSS) - Reflected in coppermine-gallery/cpg1.6.x

✍️ Description Coppermine is vulnerable to XSS attacks on /plugins/uploadh5a/help.php because it doesnt sanitize user supplied parameters as shown below. Vulnerable variable: t Method: GET The $styles variable is constructed using the user supplied data, and then is echo in the response. $styles =...

Coppermine Input Validation Error Vulnerability

Coppermine is a multi-purpose integrated web graphics library script written in PHP. An input validation error vulnerability exists in Coppermine gallery versions prior to 1.4.26. An attacker can exploit this vulnerability to execute code...

CVE-2010-4815

Coppermine gallery before 1.4.26 has an input validation vulnerability that allows for code execution...

Input validation

Coppermine gallery before 1.4.26 has an input validation vulnerability that allows for code execution...

CVE-2010-4815

Coppermine gallery before 1.4.26 has an input validation vulnerability that allows for code execution...

CVE-2010-4815

CVE-2010-4815 affects Coppermine Gallery prior to version 1.4.26. The vulnerability is an input validation flaw that can lead to code execution. Affected component: Coppermine Gallery (PHP-based web gallery). Root cause: improper input validation in the application, enabling arbitrary code execut...

Command Execution Vulnerability in Coppermine

Coppermine Photo Gallery is a WEB-based graphics gallery management program. Coppermine suffers from a command execution vulnerability that can be exploited by an attacker to execute system commands...

Coppermine Photo Gallery has a code execution vulnerability

Coppermine Photo Gallery is a Web-based album management system. The system provides user management , album password access restrictions and automatic generation of thumbnails and other functions . A code execution vulnerability exists in Coppermine Photo Gallery. The vulnerability allows...

CVE-2018-14478

ecard.php in Coppermine Photo Gallery CPG 1.5.46 has XSS via the sendername, recipientemail, greetings, or recipientname parameter...

Design/Logic Flaw

ecard.php in Coppermine Photo Gallery CPG 1.5.46 has XSS via the sendername, recipientemail, greetings, or recipientname parameter...

CVE-2018-14478

ecard.php in Coppermine Photo Gallery CPG 1.5.46 has XSS via the sendername, recipientemail, greetings, or recipientname parameter...

CVE-2018-14478

ecard.php in Coppermine Photo Gallery CPG 1.5.46 has XSS via the sendername, recipientemail, greetings, or recipientname parameter...

CVE-2018-14478

CVE-2018-14478 affects Coppermine Photo Gallery (CPG) 1.5.46. The vulnerability is a reflected cross-site scripting (XSS) in ecard.php, exploitable via parameters sender_name, recipient_email, greetings, or recipient_name. Attack patterns demonstrated in public advisories show injected scripts in...

Coppermine < 1.5.48 XSS Vulnerability

Coppermine is prone to multiple reflected cross-site scripting vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Coppermine Cross-Site Scripting Vulnerability

Coppermine is a multi-purpose integrated web graphics library script written in PHP. A cross-site scripting vulnerability exists in Coppermine version 1.5.46, which can be exploited by remote attackers to inject arbitrary web script or HTML...

Coppermine 1.5.46 Cross Site Scripting

Multiple Reflected Cross-site Scripting Vulnerabilities in Coppermine 1.5.46 Information -------------------- Advisory by Netsparker Name: Multiple Reflected Cross-site Scripting in Coppermine 1.5.46 Affected Software: Coppermine Affected Versions: 1.5.46 Homepage: http://coppermine-gallery.net/...

CVE-2014-4612

Cross-site scripting XSS vulnerability in the keywords manager keywordmgr.php in Coppermine Photo Gallery before 1.5.27 and 1.6.x before 1.6.01 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the keywords manager keywordmgr.php in Coppermine Photo Gallery before 1.5.27 and 1.6.x before 1.6.01 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-4612

The vulnerability CVE-2014-4612 affects Coppermine Photo Gallery, specifically the keywords manager (keywordmgr.php). It is exploitable via cross-site scripting (XSS) in versions before 1.5.27 and in 1.6.x before 1.6.01. The root cause is an XSS flaw that allows remote attackers to inject arbitra...

Coppermine Gallery Directory Traversal Vulnerability

Coppermine Photo Gallery is a web-based album management system. A directory traversal vulnerability exists in the Coppermine Photo Gallery page "piceditor.php", which can be exploited by an attacker to traverse directory files and obtain sensitive information...