Published: 11/01/2011 Updated: 10/10/2018

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 440

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Multiple cross-site scripting (XSS) vulnerabilities in Coppermine Photo Gallery 1.5.10 and previous versions allow remote malicious users to inject arbitrary web script or HTML via the (1) h and (2) t parameters to help.php, or (3) picfile_XXX parameter to searchnew.php.

Vulnerable Product	Search on Vulmon	Subscribe to Product
coppermine-gallery coppermine photo gallery 1.2.0
coppermine-gallery coppermine photo gallery 1.2
coppermine-gallery coppermine photo gallery 1.3.0
coppermine-gallery coppermine photo gallery 1.4.1
coppermine-gallery coppermine photo gallery 1.4.5
coppermine-gallery coppermine photo gallery 1.4.4
coppermine-gallery coppermine photo gallery 1.4.7
coppermine-gallery coppermine photo gallery 1.4.12
coppermine-gallery coppermine photo gallery 1.2.1
coppermine-gallery coppermine photo gallery 1.0
coppermine-gallery coppermine photo gallery 1.4.3
coppermine-gallery coppermine photo gallery 1.4.2
coppermine-gallery coppermine photo gallery 1.4.10
coppermine-gallery coppermine photo gallery 1.4.13
coppermine-gallery coppermine photo gallery 1.3.5
coppermine-gallery coppermine photo gallery 1.4
coppermine-gallery coppermine photo gallery 1.4.19
coppermine-gallery coppermine photo gallery 1.4.20
coppermine-gallery coppermine photo gallery 1.5.1
coppermine-gallery coppermine photo gallery 1.5.2
coppermine-gallery coppermine photo gallery 1.4.15
coppermine-gallery coppermine photo gallery 1.4.21
coppermine-gallery coppermine photo gallery 1.4.22
coppermine-gallery coppermine photo gallery 1.4.23
coppermine-gallery coppermine photo gallery 1.5.3
coppermine-gallery coppermine photo gallery 1.5.4
coppermine-gallery coppermine photo gallery 1.1
coppermine-gallery coppermine photo gallery 1.4.0
coppermine-gallery coppermine photo gallery 1.4.8
coppermine-gallery coppermine photo gallery 1.4.11
coppermine-gallery coppermine photo gallery 1.4.16
coppermine-gallery coppermine photo gallery 1.3.4
coppermine-gallery coppermine photo gallery 1.3.3
coppermine-gallery coppermine photo gallery 1.4.18
coppermine-gallery coppermine photo gallery 1.4.26
coppermine-gallery coppermine photo gallery 1.4.27
coppermine-gallery coppermine photo gallery
coppermine-gallery coppermine photo gallery 1.1.0
coppermine-gallery coppermine photo gallery 1.4.6
coppermine-gallery coppermine photo gallery 1.4.9
coppermine-gallery coppermine photo gallery 1.4.14
coppermine-gallery coppermine photo gallery 1.4.17
coppermine-gallery coppermine photo gallery 1.3.1
coppermine-gallery coppermine photo gallery 1.3.2
coppermine-gallery coppermine photo gallery 1.4.24
coppermine-gallery coppermine photo gallery 1.4.25
coppermine-gallery coppermine photo gallery 1.5.6
coppermine-gallery coppermine photo gallery 1.5.8

source: wwwsecurityfocuscom/bid/45600/info Coppermine Photo Gallery is prone to multiple cross-site-scripting vulnerabilities because it fails to properly sanitize user-supplied input An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site This ma ...

source: wwwsecurityfocuscom/bid/45600/info Coppermine Photo Gallery is prone to multiple cross-site-scripting vulnerabilities because it fails to properly sanitize user-supplied input An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site This ...

CWE-79 http://www.osvdb.org/70174 http://secunia.com/advisories/42751 http://www.osvdb.org/70173 http://www.securityfocus.com/bid/45600 http://www.waraxe.us/advisory-79.html https://exchange.xforce.ibmcloud.com/vulnerabilities/64344 http://www.securityfocus.com/archive/1/515479/100/0/threaded https://nvd.nist.gov https://www.exploit-db.com/exploits/35156/

CVE-2010-4693

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect