CVE-2008-1841

SQL injection vulnerability in the session handling functionality in bridge/coppermine.inc.php in Coppermine Photo Gallery CPG 1.4.17 and earlier allows remote attackers to execute arbitrary SQL commands via an input field associated with the sessionid variable, as exploited in the wild in April...

CVE-2008-1841

Coppermine Photo Gallery (CPG) versions 1.4.17 and earlier are vulnerable to a SQL injection flaw in the session handling functionality within bridge/coppermine.inc.php . The root cause is the failure to sanitize user-supplied input from the session_id variable (specifically the bridge wizard ses...