Coppermine Coppermine Photo Gallery — known CVE vulnerabilities
Every CVE whose affected-product data names Coppermine Coppermine Photo Gallery, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVE-2006-5622 — CVSS 7.5 (high): SQL injection vulnerability in picmgr.php in Coppermine Photo Gallery 1.4.9 allows remote attackers to execute arbitrary SQL commands via…
CVE-2007-1107 — CVSS 7.5 (high): SQL injection vulnerability in thumbnails.php in Coppermine Photo Gallery (CPG) 1.3.x allows remote authenticated users to execute…
CVE-2007-3558 — CVSS 7.5 (high): SQL injection vulnerability in Coppermine Photo Gallery (CPG) before 1.4.11 allows remote attackers to execute arbitrary SQL commands via…
CVE-2004-1989 — CVSS 7.5 (high): PHP remote file inclusion vulnerability in theme.php in Coppermine Photo Gallery 1.2.2b allows remote attackers to execute arbitrary PHP…
CVE-2007-4283 — CVSS 7.5 (high): PHP remote file inclusion vulnerability in bridge/yabbse.inc.php in Coppermine Photo Gallery (CPG) 1.3.1 allows remote attackers to execute…
CVE-2005-1225 — CVSS 7.5 (high): SQL injection vulnerability in Coppermine Photo Gallery 1.3.2 allows remote attackers to execute arbitrary SQL commands via the favs…
CVE-2005-1226 — CVSS 7.5 (high): Coppermine Photo Gallery 1.3.2 stores passwords in plaintext, which allows remote attackers to obtain sensitive information.
CVE-2006-3064 — CVSS 7.5 (high): SQL injection vulnerability in the add_hit function in include/function.inc.php in Coppermine Photo Gallery (CPG) 1.4.8, when "Keep…
CVE-2006-2976 — CVSS 7.5 (high): Unspecified vulnerability in usermgr.php in Coppermine Photo Gallery before 1.4.7 has unknown impact and remote attack vectors, possibly…
CVE-2006-4321 — CVSS 7.5 (high): PHP remote file inclusion vulnerability in cpg.php in the Coppermine Photo Gallery component (com_cpg) 1.0 and earlier for Mambo allows…
CVE-2004-1987 — CVSS 7.5 (high): picmgmtbatch.inc.php in Coppermine Photo Gallery 1.2.2b and 1.2.0 RC4 allows remote attackers with administrative privileges to execute…
CVE-2004-1988 — CVSS 7.5 (high): PHP remote file inclusion vulnerability in init.inc.php in Coppermine Photo Gallery 1.2.0 RC4 allows remote attackers to execute arbitrary…
CVE-2006-2514 — CVSS 7.5 (high): Coppermine galleries before 1.4.6, when running on Apache with mod_mime installed, allows remote attackers to upload arbitrary files via a…
CVE-2008-0506 — CVSS 6.8 (medium): include/imageObjectIM.class.php in Coppermine Photo Gallery (CPG) before 1.4.15, when the ImageMagick picture processing method is…
CVE-2008-1841 — CVSS 6.8 (medium): SQL injection vulnerability in the session handling functionality in bridge/coppermine.inc.php in Coppermine Photo Gallery (CPG) 1.4.17 and…
CVE-2007-0122 — CVSS 6.5 (medium): Multiple SQL injection vulnerabilities in Coppermine Photo Gallery 1.4.10 and earlier allow remote authenticated administrators to execute…
CVE-2008-1840 — CVSS 6.5 (medium): SQL injection vulnerability in upload.php in Coppermine Photo Gallery (CPG) 1.4.16 and earlier allows remote authenticated users or…
CVE-2007-4976 — CVSS 6.5 (medium): Directory traversal vulnerability in viewlog.php in Coppermine Photo Gallery (CPG) 1.4.12 and earlier allows remote authenticated…
CVE-2007-0835 — CVSS 6.5 (medium): admin.php in Coppermine Photo Gallery 1.4.10, and possibly earlier, allows remote authenticated users to execute arbitrary shell commands…
CVE-2007-0115 — CVSS 6.0 (medium): Static code injection vulnerability in Coppermine Photo Gallery 1.4.10 and earlier allows remote authenticated administrators to execute…
CVE-2004-1984 — CVSS 5.0 (medium): Coppermine Photo Gallery 1.2.2b and 1.2.0 RC4 allows remote attackers to obtain sensitive information via a direct HTTP request to (1)…
CVE-2004-1986 — CVSS 5.0 (medium): Directory traversal vulnerability in modules.php in Coppermine Photo Gallery 1.2.2b and 1.2.0 RC4 allows remote attackers with…
CVE-2006-0872 — CVSS 5.0 (medium): Directory traversal vulnerability in init.inc.php in Coppermine Photo Gallery 1.4.3 and earlier allows remote attackers to include…
CVE-2006-0873 — CVSS 5.0 (medium): Absolute path traversal vulnerability in docs/showdocs.php in Coppermine Photo Gallery 1.4.3 and earlier allows remote attackers to include…
CVE-2006-1909 — CVSS 5.0 (medium): Directory traversal vulnerability in index.php in Coppermine 1.4.4 allows remote attackers to read arbitrary files via a .//./ (modified…
CVE-2009-1616 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in docs/showdoc.php in Coppermine Photo Gallery (CPG) before 1.4.22 allows remote attackers to…
CVE-2005-2676 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in displayimage.php in Coppermine Photo Gallery before 1.3.4 allows remote attackers to inject…
CVE-2005-1172 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in init.inc.php in Coppermine Photo Gallery 1.3.x allows remote attackers to inject arbitrary web…
CVE-2004-1985 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in menu.inc.php in Coppermine Photo Gallery 1.2.2b allows remote attackers to inject arbitrary…
CVE-2007-5888 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in displayecard.php in Coppermine Photo Gallery (CPG) before 1.4.14 allows remote attackers to…
CVE-2008-0505 — CVSS 4.3 (medium): Multiple cross-site scripting (XSS) vulnerabilities in docs/showdoc.php in Coppermine Photo Gallery (CPG) before 1.4.15 allow remote…
CVE-2007-0836 — CVSS 4.0 (medium): admin.php in Coppermine Photo Gallery 1.4.10, and possibly earlier, allows remote authenticated users to include arbitrary local and…
CVE-2007-4977 — CVSS 3.5 (low): Cross-site scripting (XSS) vulnerability in mode.php in Coppermine Photo Gallery (CPG) 1.4.12 and earlier allows remote attackers to inject…
CVE-2006-6123 — CVSS 2.6 (low): Coppermine Photo Gallery (CPG) 1.4.8 stable, with register_globals enabled, allows remote attackers to bypass XSS protection and set…