Cross site scripting

2011-06-1417:55:00

PRIOn knowledge base

www.prio-n.com

6.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

49.9%

JSON

Cross-site scripting (XSS) vulnerability in Coppermine Photo Gallery (CPG) before 1.4.27 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CPENameOperatorVersion
coppermine_photo_galleryeq1.4.17
coppermine_photo_galleryeq1.4.11
coppermine_photo_galleryeq1.4.19
coppermine_photo_galleryeq1.4.14
coppermine_photo_galleryeq1.2.0 rc2
coppermine_photo_galleryeq1.4.8
coppermine_photo_galleryeq1.2.1
coppermine_photo_galleryeq1.4.23
coppermine_photo_galleryeq1.4.22
coppermine_photo_galleryeq1.4.7

Name	Operator	Version
coppermine_photo_gallery	eq	1.4.17
coppermine_photo_gallery	eq	1.4.11
coppermine_photo_gallery	eq	1.4.19
coppermine_photo_gallery	eq	1.4.14
coppermine_photo_gallery	eq	1.2.0 rc2
coppermine_photo_gallery	eq	1.4.8
coppermine_photo_gallery	eq	1.2.1
coppermine_photo_gallery	eq	1.4.23
coppermine_photo_gallery	eq	1.4.22
coppermine_photo_gallery	eq	1.4.7

Rows per page:

1-10 of 491

References

bugs.gentoo.org/show_bug.cgi?id=347287

forum.coppermine-gallery.net/index.php/topic%2C65023.msg322935.html

www.openwall.com/lists/oss-security/2011/06/08/2

www.openwall.com/lists/oss-security/2011/06/08/6