Coppermine 1.5.18 Multiple Vulnerabilities

Exploit for php platform in category web applications Author: Janek Vind "waraxe" Date: 29. March 2012 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-81.html Affected Software: Coppermine is a multi-purpose fully-featured and integrated web picture gallery script written in PHP using...

coppermine 1.5.18 - Multiple Vulnerabilities

coppermine 1.5.18 - Multiple Vulnerabilities waraxe-2012-SA081 - Multiple Vulnerabilities in Coppermine 1.5.18 ============================================================================== Author: Janek Vind "waraxe" Date: 29. March 2012 Location: Estonia, Tartu Web:...

coppermine 1.5.18 - Multiple Vulnerabilities

waraxe-2012-SA081 - Multiple Vulnerabilities in Coppermine 1.5.18 ============================================================================== Author: Janek Vind "waraxe" Date: 29. March 2012 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-81.html Affected Software: Coppermine is a...

coppermine -- Multiple vulnerabilities

The Coppermine Team reports: The release covers several path disclosure vulnerabilities. If unpatched, it's possible to generate an error that will reveal the full path of the script. A remote user can determine the full path to the web root directory and other potentially sensitive information...

CVE-2011-3722

Coppermine Photo Gallery CPG 1.5.12 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by include/inspekt.php and certain other files...

Information disclosure

Coppermine Photo Gallery CPG 1.5.12 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by include/inspekt.php and certain other files...

CVE-2011-3722

CVE-2011-3722 affects Coppermine Photo Gallery (CPG) 1.5.12. The issue allows remote attackers to disclose sensitive information by directly requesting certain PHP files, resulting in an error message that reveals the installation path (illustrated by include/inspekt.php and related files). The e...

CVE-2011-3722: Exposure of Sensitive Information to an Unauthorized Actor

Coppermine Photo Gallery CPG 1.5.12 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by include/inspekt.php and certain other files...

PT-2011-4612

Name of the Vulnerable Software and Affected Versions Coppermine Photo Gallery version 1.5.12 Description The issue allows remote attackers to obtain sensitive information via a direct request to a .php file. This is achieved by exploiting files such as include/inspekt.php, which reveals the...

CVE-2011-2476

Cross-site scripting XSS vulnerability in Coppermine Photo Gallery CPG before 1.5.12 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2010-4667...

CVE-2010-4667

Cross-site scripting XSS vulnerability in Coppermine Photo Gallery CPG before 1.4.27 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in Coppermine Photo Gallery CPG before 1.4.27 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in Coppermine Photo Gallery CPG before 1.5.12 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2010-4667...

CVE-2011-2476

Cross-site scripting XSS vulnerability in Coppermine Photo Gallery CPG before 1.5.12 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2010-4667...

CVE-2011-2476

CVE-2011-2476 describes a cross-site scripting (XSS) vulnerability in Coppermine Photo Gallery (CPG) before 1.5.12 that allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The description explicitly states it is a different issue from CVE-2010-4667. No root-cau...

CVE-2010-4667

CVE-2010-4667 affects Coppermine Photo Gallery (CPG) prior to version 1.4.27. The vulnerability is a Cross-site Scripting (XSS) issue that allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The official description notes no specifics on vectors, and the connec...

CVE-2010-4667

Cross-site scripting XSS vulnerability in Coppermine Photo Gallery CPG before 1.4.27 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2011-3899

Name of the Vulnerable Software and Affected Versions Coppermine Photo Gallery versions prior to 1.5.12 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Recommendations For versions prior to 1.5.12, update to...

CVE-2011-2476: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Coppermine Photo Gallery CPG before 1.5.12 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2010-4667...

CVE-2010-4667: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Coppermine Photo Gallery CPG before 1.4.27 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...