PT-2025-52343

Name of the Vulnerable Software and Affected Versions phpMsAdmin version 2.2 Description A Reflected Cross-Site Scripting XSS issue exists in the database mode.php file. After a user is authenticated, an attacker can execute arbitrary web script or HTML via the dbname parameter. Recommendations...

CVE-2025-9768

CVE-2025-9768 affects the itsourcecode Sports Management System 1.0 . Multiple connected sources confirm a vulnerability in the file "/Admin/mode.php" where the code parameter can be manipulated to perform a SQL injection , with remote exploitation possible. The issue is consistently described ac...

CVE-2025-9768: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in itsourcecode Sports Management System 1.0. This impacts an unknown function of the file /Admin/mode.php. The manipulation of the argument code leads to sql injection. The attack is possible to be carried out remotely...

Open redirect

Open redirect vulnerability in mode.php in Coppermine Photo Gallery before 1.5.36 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the referer parameter...

CVE-2015-3922

The CVE covers Coppermine Photo Gallery open redirect in mode.php prior to 1.5.36. The vulnerability allows remote attackers to redirect users to arbitrary sites via a URL in the referer parameter, enabling phishing-like redirection. Affected software: Coppermine Photo Gallery (web-based gallery)...

CVE-2015-3922: Undefined Security Weakness

Open redirect vulnerability in mode.php in Coppermine Photo Gallery before 1.5.36 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the referer parameter...

FreeBSD : coppermine -- multiple vulnerabilities (12488805-6773-11dc-8be8-02e0185f8d72)

The coppermine development team reports two vulnerabilities with the coppermine application. These vulnerabilities are caused by improper checking of the log variable in 'viewlog.php' and improper checking of the referer variable in 'mode.php'. This could allow local file inclusion, potentially...

CVE-2007-4977: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in mode.php in Coppermine Photo Gallery CPG 1.4.12 and earlier allows remote attackers to inject arbitrary web script or HTML via the referer parameter...

coppermine -- multiple vulnerabilities

The coppermine development team reports two vulnerabilities with the coppermine application. These vulnerabilities are caused by improper checking of the log variable in "viewlog.php" and improper checking of the referer variable in "mode.php". This could allow local file inclusion, potentially...