CVE-2005-1225

SQL injection vulnerability in Coppermine Photo Gallery 1.3.2 allows remote attackers to execute arbitrary SQL commands via the favs parameter to 1 init.inc.php or 2 zipdownload.php...

CVE-2005-1226

Coppermine Photo Gallery 1.3.2 stores passwords in plaintext, which allows remote attackers to obtain sensitive information...

CVE-2005-1172

Cross-site scripting XSS vulnerability in init.inc.php in Coppermine Photo Gallery 1.3.x allows remote attackers to inject arbitrary web script or HTML via the X-Forwarded-For parameter...

CVE-2005-1226

Coppermine Photo Gallery 1.3.2 stores passwords in plaintext, which allows remote attackers to obtain sensitive information...

CVE-2005-1225

SQL injection vulnerability in Coppermine Photo Gallery 1.3.2 allows remote attackers to execute arbitrary SQL commands via the favs parameter to 1 init.inc.php or 2 zipdownload.php...

CVE-2005-1225

CVE-2005-1225 is an SQL injection vulnerability affecting Coppermine Photo Gallery 1.3.2, where the vulnerability exists in the way the server processes the favs parameter sent to either init.inc.php or zipdownload.php . The affected component is the web application’s PHP code handling these scri...

CVE-2005-1226

CVE-2005-1226 affects Coppermine Photo Gallery 1.3.2, where passwords are stored in plaintext. This enables remote attackers to obtain sensitive information and potentially compromise accounts. The NVD entry reports a CVSS2 base score of 7.5 (HIGH) with network access, low attack complexity, no a...

CVE-2005-1226: Undefined Security Weakness

Coppermine Photo Gallery 1.3.2 stores passwords in plaintext, which allows remote attackers to obtain sensitive information...

CVE-2005-1225: Undefined Security Weakness

SQL injection vulnerability in Coppermine Photo Gallery 1.3.2 allows remote attackers to execute arbitrary SQL commands via the favs parameter to 1 init.inc.php or 2 zipdownload.php...

Coppermine Photo Gallery < 1.3.2 Multiple SQL Injections

According to its version number, the version of Coppermine Photo Gallery installed on the remote host suffers from multiple SQL injection vulnerabilities due to its failure to sanitize user-supplied cookie data before using it in SQL queries in the scripts 'include/functions.inc.php' as well as...

Coppermine Gallery SQL Injection

Binary data 2846.prm...

Vulnerability in Coppermine Photo Gallery 1.3.*

+-----------------------------------------+ | RST/GHC Coppermine ADVISORY | | Product: Coppermine Photo Gallery | | Version: 1.3.x | | URL: http://coppermine.sourceforge.net/ | +-----------------------------------------+ Product Description "Coppermine Photo Gallery is a picture gallery script...

CVE-2005-1172

Cross-site scripting XSS vulnerability in init.inc.php in Coppermine Photo Gallery 1.3.x allows remote attackers to inject arbitrary web script or HTML via the X-Forwarded-For parameter...

CVE-2005-1172

CVE-2005-1172 describes a cross-site scripting (XSS) vulnerability in Coppermine Photo Gallery 1.3.x, specifically in the file init.inc.php. The issue allows remote attackers to inject arbitrary web script or HTML via the X-Forwarded-For parameter. Multiple connected sources corroborate this as a...

CVE-2005-1172: Undefined Security Weakness

Cross-site scripting XSS vulnerability in init.inc.php in Coppermine Photo Gallery 1.3.x allows remote attackers to inject arbitrary web script or HTML via the X-Forwarded-For parameter...

coppermine -- IP spoofing and XSS vulnerability

GHC team reports about coppermine The lack of sanitizing of user defined variables may result in undesirable consequences such as IP spoofing or XSS attack. Generally users of Coppermine Gallery can post comments. Remote address & x-forwarded-for variables are logged for admin's eyes...

Coppermine Gallery < 1.3.3 init.inc.php HTML Injection

Binary data 2839.prm...

Coppermine Photo Gallery init.inc.php X-Forwarded-For XSS

According to its version number, the version of Coppermine Photo Gallery installed on the remote host is affected by a cross-site scripting vulnerability when logging user comments. A user with access to the comments module can exploit this flaw using a specially crafted 'X-Forwarded-For' header ...

CopperExport Plugin < 0.2.1 xp_publish.php SQL Injection

Binary data 2676.prm...

Coppermine Photo Gallery Detection

This plugin determines if Coppermine Photo Gallery is installed on the remote web server and extracts version numbers and locations of any instances found. Coppermine is an open source, web-based picture gallery application written in PHP. C Tenable Network Security, Inc. include"compat.inc"; if...