Vulnerability index

Browse CVEs

14 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Coppermine Photo Gallery HIGH 8.8
CVE-2023-53868

Coppermine Gallery 1.6.25 contains a remote code execution vulnerability that allows authenticated attackers to upload malicious PHP files through th…

No fix yet
Fix from $1,950 2025-12-15
Coppermine Gallery CRITICAL 9.8
CVE-2010-4815

Coppermine gallery before 1.4.26 has an input validation vulnerability that allows for code execution.

Fix: 1.4.26+
Fix from $2,300 2020-02-05
Coppermine Photo Gallery MEDIUM 6.1
CVE-2018-14478

ecard.php in Coppermine Photo Gallery (CPG) 1.5.46 has XSS via the sender_name, recipient_email, greetings, or recipient_name parameter.

No fix yet
Fix from $1,600 2019-05-07
Coppermine Photo Gallery MEDIUM 6.1
CVE-2014-4612

Cross-site scripting (XSS) vulnerability in the keywords manager (keywordmgr.php) in Coppermine Photo Gallery before 1.5.27 and 1.6.x before 1.6.01 a…

Fix: 1.5.28 / 1.6.01+
Fix from $1,600 2018-03-16
Coppermine Photo Gallery MEDIUM 5.0
CVE-2015-3923

Coppermine Photo Gallery before 1.5.36 allows remote attackers to enumerate directories via a full path in the folder parameter to minibrowser.php.

Fix: after 1.5.4
Fix from $1,600 2015-06-10
Coppermine Photo Gallery MEDIUM 5.8
CVE-2015-3922

Open redirect vulnerability in mode.php in Coppermine Photo Gallery before 1.5.36 allows remote attackers to redirect users to arbitrary web sites an…

Fix: after 1.5.34
Fix from $1,600 2015-05-27
Coppermine Photo Gallery MEDIUM 5.0
CVE-2012-1614EPSS 9%

Coppermine Photo Gallery before 1.5.20 allows remote attackers to obtain sensitive information via (1) a direct request to plugins/visiblehookpoints/…

Fix: after 1.5.18
Fix from $1,600 2012-09-04
Coppermine Photo Gallery MEDIUM 5.0
CVE-2011-3722

Coppermine Photo Gallery (CPG) 1.5.12 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the …

No fix yet
Fix from $1,600 2011-09-23
Coppermine Photo Gallery MEDIUM 5.0
CVE-2008-7186

Coppermine Photo Gallery (CPG) 1.4.14 does not restrict access to update.php, which allows remote attackers to obtain sensitive information such as t…

Patch available
Fix from $1,600 2009-09-09
Coppermine Photo Gallery MEDIUM 5.0
CVE-2008-7187

Coppermine Photo Gallery (CPG) 1.4.14 allows remote attackers to obtain sensitive information via a direct request to include/slideshow.inc.php, whic…

Patch available
Fix from $1,600 2009-09-09
Coppermine Photo Gallery HIGH 7.5
CVE-2008-3486EPSS 6%

Directory traversal vulnerability in the user_get_profile function in include/functions.inc.php in Coppermine Photo Gallery (CPG) 1.4.18 and earlier,…

Fix: after 1.4.18
Fix from $1,950 2008-08-06
Coppermine Photo Gallery HIGH 7.5
CVE-2008-3481

themes/sample/theme.php in Coppermine Photo Gallery (CPG) 1.4.18 and earlier allows remote attackers to obtain sensitive information via a direct req…

Fix: after 1.4.18
Fix from $1,950 2008-08-05
Coppermine Photo Gallery MEDIUM 6.5
CVE-2008-0504

Multiple SQL injection vulnerabilities in Coppermine Photo Gallery (CPG) before 1.4.15 allow remote authenticated administrators to execute arbitrary…

Fix: after 1.4.14
Fix from $1,600 2008-01-31
Coppermine Photo Gallery MEDIUM 5.0
CVE-2005-3979

relocate_server.php in Coppermine Photo Gallery (CPG) 1.4.2 and 1.4 beta is not removed after installation and does not use authentication, which all…

Mitigation only
Fix from $1,600 2005-12-03