Lucene search

[email protected]NVD:CVE-2012-1613

HistorySep 04, 2012 - 8:55 p.m.

CVE-2012-1613

2012-09-0420:55:01

CWE-79

[email protected]

web.nvd.nist.gov

3.5 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

5.2 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

56.6%

JSON

Cross-site scripting (XSS) vulnerability in edit_one_pic.php in Coppermine Photo Gallery before 1.5.20 allows remote authenticated users with certain privileges to inject arbitrary web script or HTML via the keywords parameter.

Affected configurations

NVD

Node

coppermine-gallerycoppermine_photo_galleryRange≤1.5.18

coppermine-gallerycoppermine_photo_galleryMatch1.0

coppermine-gallerycoppermine_photo_galleryMatch1.0rc3

coppermine-gallerycoppermine_photo_galleryMatch1.1

coppermine-gallerycoppermine_photo_galleryMatch1.1beta_2

coppermine-gallerycoppermine_photo_galleryMatch1.1.0

coppermine-gallerycoppermine_photo_galleryMatch1.2

coppermine-gallerycoppermine_photo_galleryMatch1.2.0

coppermine-gallerycoppermine_photo_galleryMatch1.2.0rc2

coppermine-gallerycoppermine_photo_galleryMatch1.2.1

coppermine-gallerycoppermine_photo_galleryMatch1.2.1b

coppermine-gallerycoppermine_photo_galleryMatch1.2.1b-nuke

coppermine-gallerycoppermine_photo_galleryMatch1.3.0

coppermine-gallerycoppermine_photo_galleryMatch1.3.1

coppermine-gallerycoppermine_photo_galleryMatch1.3.2

coppermine-gallerycoppermine_photo_galleryMatch1.3.3

coppermine-gallerycoppermine_photo_galleryMatch1.3.4

coppermine-gallerycoppermine_photo_galleryMatch1.3.5

coppermine-gallerycoppermine_photo_galleryMatch1.4.0

coppermine-gallerycoppermine_photo_galleryMatch1.4.0alpha

coppermine-gallerycoppermine_photo_galleryMatch1.4.0beta

coppermine-gallerycoppermine_photo_galleryMatch1.4.1

coppermine-gallerycoppermine_photo_galleryMatch1.4.1beta

coppermine-gallerycoppermine_photo_galleryMatch1.4.2

coppermine-gallerycoppermine_photo_galleryMatch1.4.3

coppermine-gallerycoppermine_photo_galleryMatch1.4.4

coppermine-gallerycoppermine_photo_galleryMatch1.4.5

coppermine-gallerycoppermine_photo_galleryMatch1.4.6

coppermine-gallerycoppermine_photo_galleryMatch1.4.7

coppermine-gallerycoppermine_photo_galleryMatch1.4.8

coppermine-gallerycoppermine_photo_galleryMatch1.4.9

coppermine-gallerycoppermine_photo_galleryMatch1.4.10

coppermine-gallerycoppermine_photo_galleryMatch1.4.11

coppermine-gallerycoppermine_photo_galleryMatch1.4.12

coppermine-gallerycoppermine_photo_galleryMatch1.4.13

coppermine-gallerycoppermine_photo_galleryMatch1.4.14

coppermine-gallerycoppermine_photo_galleryMatch1.4.15

coppermine-gallerycoppermine_photo_galleryMatch1.4.16

coppermine-gallerycoppermine_photo_galleryMatch1.4.17

coppermine-gallerycoppermine_photo_galleryMatch1.4.18

coppermine-gallerycoppermine_photo_galleryMatch1.4.19

coppermine-gallerycoppermine_photo_galleryMatch1.4.20

coppermine-gallerycoppermine_photo_galleryMatch1.4.21

coppermine-gallerycoppermine_photo_galleryMatch1.4.22

coppermine-gallerycoppermine_photo_galleryMatch1.4.23

coppermine-gallerycoppermine_photo_galleryMatch1.4.24

coppermine-gallerycoppermine_photo_galleryMatch1.4.25

coppermine-gallerycoppermine_photo_galleryMatch1.4.26

coppermine-gallerycoppermine_photo_galleryMatch1.4.27

coppermine-gallerycoppermine_photo_galleryMatch1.5.1alpha

coppermine-gallerycoppermine_photo_galleryMatch1.5.2beta

coppermine-gallerycoppermine_photo_galleryMatch1.5.3rc

coppermine-gallerycoppermine_photo_galleryMatch1.5.4

coppermine-gallerycoppermine_photo_galleryMatch1.5.6

coppermine-gallerycoppermine_photo_galleryMatch1.5.8

coppermine-gallerycoppermine_photo_galleryMatch1.5.10

coppermine-gallerycoppermine_photo_galleryMatch1.5.12

coppermine-gallerycoppermine_photo_galleryMatch1.5.14

coppermine-gallerycoppermine_photo_galleryMatch1.5.16

References

archives.neohapsis.com/archives/bugtraq/2012-03/0167.html

coppermine.svn.sourceforge.net/viewvc/coppermine/trunk/cpg1.6.x/edit_one_pic.php?r1=8348&r2=8354

forum.coppermine-gallery.net/index.php/topic%2C74682.0.html

osvdb.org/80731

packetstormsecurity.org/files/111369/Coppermine-1.5.18-Cross-Site-Scripting-Path-Disclosure.html

secunia.com/advisories/48643

www.exploit-db.com/exploits/18680

www.openwall.com/lists/oss-security/2012/03/30/5

www.openwall.com/lists/oss-security/2012/03/30/6

www.openwall.com/lists/oss-security/2012/04/03/6

www.securityfocus.com/bid/52818

www.waraxe.us/advisory-81.html

3.5 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

5.2 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

56.6%

JSON

Related for NVD:CVE-2012-1613

prion1 cve1 cvelist1 freebsd1 openvas2 nessus1