Path traversal

Coppermine Photo Gallery before 1.5.36 allows remote attackers to enumerate directories via a full path in the folder parameter to minibrowser.php...

CVE-2015-3923

Coppermine Photo Gallery before 1.5.36 allows remote attackers to enumerate directories via a full path in the folder parameter to minibrowser.php...

CVE-2015-3923

Coppermine Photo Gallery (before 1.5.36) is vulnerable to directory enumeration via the folder parameter in minibrowser.php due to improper filtering, enabling remote attackers to traverse directories. The affected component is Coppermine Photo Gallery, minibrowser.php, with a path traversal issu...

CVE-2015-3923: Exposure of Sensitive Information to an Unauthorized Actor

Coppermine Photo Gallery before 1.5.36 allows remote attackers to enumerate directories via a full path in the folder parameter to minibrowser.php...

PT-2015-6348

Name of the Vulnerable Software and Affected Versions Coppermine Photo Gallery versions prior to 1.5.36 Description The issue allows remote attackers to enumerate directories by providing a full path in the folder parameter to "minibrowser.php" API endpoint. Recommendations For versions prior to...

Coppermine Photo Gallery Open Redirect Vulnerability

Coppermine Photo Gallery is a WEB-based graphics gallery management program. An open redirection vulnerability exists in Coppermine Photo Gallery versions prior to 1.5.36, which can be exploited by remote attackers to redirect users to arbitrary web sites and conduct phishing attacks...

Coppermine Photo Gallery Cross-Site Scripting Vulnerability

Coppermine Photo Gallery is a WEB-based graphics gallery management program. A cross-site scripting vulnerability exists in Coppermine Photo Gallery versions prior to 1.5.36, which allows remote, authenticated users to inject arbitrary web script or HTML via reference parameters...

CVE-2015-3922

Open redirect vulnerability in mode.php in Coppermine Photo Gallery before 1.5.36 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the referer parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in contact.php in Coppermine Photo Gallery before 1.5.36 allows remote authenticated users to inject arbitrary web script or HTML via the referer parameter...

Open redirect

Open redirect vulnerability in mode.php in Coppermine Photo Gallery before 1.5.36 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the referer parameter...

CVE-2015-3921

Cross-site scripting XSS vulnerability in contact.php in Coppermine Photo Gallery before 1.5.36 allows remote authenticated users to inject arbitrary web script or HTML via the referer parameter...

CVE-2015-3922

Open redirect vulnerability in mode.php in Coppermine Photo Gallery before 1.5.36 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the referer parameter...

CVE-2015-3921

Coppermine Photo Gallery contains a cross-site scripting (XSS) flaw in contact.php, exploitable by remote authenticated users via the referer parameter. Affected versions are before 1.5.36. The vulnerability allows injection of arbitrary web script/HTML. Root cause is improper handling of the ref...

CVE-2015-3922

The CVE covers Coppermine Photo Gallery open redirect in mode.php prior to 1.5.36. The vulnerability allows remote attackers to redirect users to arbitrary sites via a URL in the referer parameter, enabling phishing-like redirection. Affected software: Coppermine Photo Gallery (web-based gallery)...

PT-2015-6346

Name of the Vulnerable Software and Affected Versions Coppermine Photo Gallery versions prior to 1.5.36 Description A cross-site scripting XSS issue exists, allowing remote authenticated users to inject arbitrary web script or HTML. This is achieved via the referer parameter in the contact.php...

PT-2015-6347

Name of the Vulnerable Software and Affected Versions Coppermine Photo Gallery versions prior to 1.5.36 Description The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the referer parameter. This can be exploited by including a...

CVE-2015-3922: Undefined Security Weakness

Open redirect vulnerability in mode.php in Coppermine Photo Gallery before 1.5.36 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the referer parameter...

CVE-2015-3921: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in contact.php in Coppermine Photo Gallery before 1.5.36 allows remote authenticated users to inject arbitrary web script or HTML via the referer parameter...

Coppermine Photo Gallery <= 1.4.3 - Remote Commands Execution Exploit

No description provided by source. ?php ---cpg143inclxpl.php 15.38 04/12/2005 Coppermine Photo Gallery = 1.4.3 remote commands execution coded by rgod site: http://retrogod.altervista.org - this works regardless of any php.ini settings, you need a normal user account with upload rights in persona...

Coppermine Photo Gallery 1.x theme.php Multiple Parameter Remote File Inclusion

No description provided by source. source: http://www.securityfocus.com/bid/10253/info Coppermine Photo Gallery is reported prone to multiple input-validation vulnerabilities, some of which may lead to arbitrary command execution. These issues occur because the application fails to properly...