7717 matches found
CVE-2004-1989: Undefined Security Weakness
PHP remote file inclusion vulnerability in theme.php in Coppermine Photo Gallery 1.2.2b allows remote attackers to execute arbitrary PHP code by modifying the THEMEDIR parameter to reference a URL on a remote web server that contains userlistinfobox.inc...
CVE-2004-1985: Undefined Security Weakness
Cross-site scripting XSS vulnerability in menu.inc.php in Coppermine Photo Gallery 1.2.2b allows remote attackers to inject arbitrary HTML or web script via the CPGURL parameter...
CVE-2004-1984: Undefined Security Weakness
Coppermine Photo Gallery 1.2.2b and 1.2.0 RC4 allows remote attackers to obtain sensitive information via a direct HTTP request to 1 phpinfo.php, 2 addpic.php, 3 config.php, 4 dbinput.php, 5 displayecard.php, 6 ecard.php, 7 crop.inc.php, which reveal the full path in a PHP error message...
CVE-2005-0538
Directory traversal vulnerability in 1 GinpPictureServlet.java and 2 PicCollection.java in ginp Java Photo Gallery Web Application before 0.22 allows remote attackers to read arbitrary files...
CVE-2005-1172
Cross-site scripting XSS vulnerability in init.inc.php in Coppermine Photo Gallery 1.3.x allows remote attackers to inject arbitrary web script or HTML via the X-Forwarded-For parameter...
CVE-2005-1226
Coppermine Photo Gallery 1.3.2 stores passwords in plaintext, which allows remote attackers to obtain sensitive information...
CVE-2005-1115
Multiple cross-site scripting XSS vulnerabilities in Photo Album 2.0.53 module for phpBB allow remote attackers to inject arbitrary web script or HTML via the bsid parameter to 1 albumcat.php or 2 albumcomment.php...
CVE-2005-1114
Multiple SQL injection vulnerabilities in albumsearch.php in Photo Album 2.0.53 for phpBB allow remote attackers to execute arbitrary SQL commands via the 1 mode or 2 search parameters...
CVE-2005-1225
SQL injection vulnerability in Coppermine Photo Gallery 1.3.2 allows remote attackers to execute arbitrary SQL commands via the favs parameter to 1 init.inc.php or 2 zipdownload.php...
CVE-2005-0776
adm-photo.php in PhotoPost PHP 5.0 RC3 does not properly verify administrative privileges before manipulating photos, which could allow remote attackers to manipulate other users' photos...
CVE-2005-1226
Coppermine Photo Gallery 1.3.2 stores passwords in plaintext, which allows remote attackers to obtain sensitive information...
CVE-2005-1225
SQL injection vulnerability in Coppermine Photo Gallery 1.3.2 allows remote attackers to execute arbitrary SQL commands via the favs parameter to 1 init.inc.php or 2 zipdownload.php...
CVE-2005-1225
CVE-2005-1225 is an SQL injection vulnerability affecting Coppermine Photo Gallery 1.3.2, where the vulnerability exists in the way the server processes the favs parameter sent to either init.inc.php or zipdownload.php . The affected component is the web application’s PHP code handling these scri...
CVE-2005-1226
CVE-2005-1226 affects Coppermine Photo Gallery 1.3.2, where passwords are stored in plaintext. This enables remote attackers to obtain sensitive information and potentially compromise accounts. The NVD entry reports a CVSS2 base score of 7.5 (HIGH) with network access, low attack complexity, no a...
CVE-2005-1226: Undefined Security Weakness
Coppermine Photo Gallery 1.3.2 stores passwords in plaintext, which allows remote attackers to obtain sensitive information...
CVE-2005-1225: Undefined Security Weakness
SQL injection vulnerability in Coppermine Photo Gallery 1.3.2 allows remote attackers to execute arbitrary SQL commands via the favs parameter to 1 init.inc.php or 2 zipdownload.php...
Coppermine Photo Gallery < 1.3.2 Multiple SQL Injections
According to its version number, the version of Coppermine Photo Gallery installed on the remote host suffers from multiple SQL injection vulnerabilities due to its failure to sanitize user-supplied cookie data before using it in SQL queries in the scripts 'include/functions.inc.php' as well as...
Vulnerability in Coppermine Photo Gallery 1.3.*
+-----------------------------------------+ | RST/GHC Coppermine ADVISORY | | Product: Coppermine Photo Gallery | | Version: 1.3.x | | URL: http://coppermine.sourceforge.net/ | +-----------------------------------------+ Product Description "Coppermine Photo Gallery is a picture gallery script...
CVE-2005-1172
CVE-2005-1172 describes a cross-site scripting (XSS) vulnerability in Coppermine Photo Gallery 1.3.x, specifically in the file init.inc.php. The issue allows remote attackers to inject arbitrary web script or HTML via the X-Forwarded-For parameter. Multiple connected sources corroborate this as a...