Vulnerability index

Browse CVEs

26 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Coppermine Photo Gallery MEDIUM 6.8
CVE-2008-1841

SQL injection vulnerability in the session handling functionality in bridge/coppermine.inc.php in Coppermine Photo Gallery (CPG) 1.4.17 and earlier a…

Patch available
Fix from $1,600 2008-04-16
Coppermine Photo Gallery MEDIUM 6.5
CVE-2008-1840

SQL injection vulnerability in upload.php in Coppermine Photo Gallery (CPG) 1.4.16 and earlier allows remote authenticated users or user-assisted rem…

Fix: after 1.4.16
Fix from $1,600 2008-04-16
Coppermine Photo Gallery MEDIUM 6.8
CVE-2008-0506EPSS 59%

include/imageObjectIM.class.php in Coppermine Photo Gallery (CPG) before 1.4.15, when the ImageMagick picture processing method is configured, allows…

Fix: after 1.4.14
Fix from $1,600 2008-01-31
Coppermine Photo Gallery MEDIUM 6.5
CVE-2007-4976EPSS 9%

Directory traversal vulnerability in viewlog.php in Coppermine Photo Gallery (CPG) 1.4.12 and earlier allows remote authenticated administrators to i…

Patch available
Fix from $1,600 2007-09-19
Coppermine Photo Gallery HIGH 7.5
CVE-2007-4283

PHP remote file inclusion vulnerability in bridge/yabbse.inc.php in Coppermine Photo Gallery (CPG) 1.3.1 allows remote attackers to execute arbitrary…

Mitigation only
Fix from $1,950 2007-08-09
Coppermine Photo Gallery HIGH 7.5
CVE-2007-3558

SQL injection vulnerability in Coppermine Photo Gallery (CPG) before 1.4.11 allows remote attackers to execute arbitrary SQL commands via an album pa…

Fix: after 1.4.10
Fix from $1,950 2007-07-04
Coppermine Photo Gallery HIGH 10.0
CVE-2007-1414EPSS 5%

Multiple PHP remote file inclusion vulnerabilities in Coppermine Photo Gallery (CPG) allow remote attackers to execute arbitrary PHP code via a URL i…

No fix yet
Fix from $1,950 2007-03-12
Coppermine Photo Gallery HIGH 7.5
CVE-2007-1107

SQL injection vulnerability in thumbnails.php in Coppermine Photo Gallery (CPG) 1.3.x allows remote authenticated users to execute arbitrary SQL comm…

No fix yet
Fix from $1,950 2007-02-26
Coppermine Photo Gallery MEDIUM 6.5
CVE-2007-0835

admin.php in Coppermine Photo Gallery 1.4.10, and possibly earlier, allows remote authenticated users to execute arbitrary shell commands via shell m…

Fix: after 1.4.10
Fix from $1,600 2007-02-08
Coppermine Photo Gallery MEDIUM 6.5
CVE-2007-0122

Multiple SQL injection vulnerabilities in Coppermine Photo Gallery 1.4.10 and earlier allow remote authenticated administrators to execute arbitrary …

Fix: after 1.4.10
Fix from $1,600 2007-01-09
Coppermine Photo Gallery MEDIUM 6.0
CVE-2007-0115

Static code injection vulnerability in Coppermine Photo Gallery 1.4.10 and earlier allows remote authenticated administrators to execute arbitrary PH…

Fix: after 1.4.10
Fix from $1,600 2007-01-09
Coppermine Photo Gallery HIGH 7.5
CVE-2006-5622

SQL injection vulnerability in picmgr.php in Coppermine Photo Gallery 1.4.9 allows remote attackers to execute arbitrary SQL commands via the aid par…

Patch available
Fix from $1,950 2006-10-31
Coppermine Photo Gallery HIGH 7.5
CVE-2006-4321

PHP remote file inclusion vulnerability in cpg.php in the Coppermine Photo Gallery component (com_cpg) 1.0 and earlier for Mambo allows remote attack…

No fix yet
Fix from $1,950 2006-08-24
Coppermine Photo Gallery HIGH 7.5
CVE-2006-3064

SQL injection vulnerability in the add_hit function in include/function.inc.php in Coppermine Photo Gallery (CPG) 1.4.8, when "Keep detailed hit stat…

No fix yet
Fix from $1,950 2006-06-19
Coppermine Photo Gallery HIGH 7.5
CVE-2006-2976

Unspecified vulnerability in usermgr.php in Coppermine Photo Gallery before 1.4.7 has unknown impact and remote attack vectors, possibly related to a…

Patch available
Fix from $1,950 2006-06-12
Coppermine Photo Gallery HIGH 7.5
CVE-2006-2514

Coppermine galleries before 1.4.6, when running on Apache with mod_mime installed, allows remote attackers to upload arbitrary files via a filename w…

Fix: after 1.4.5
Fix from $1,950 2006-05-22
Coppermine Photo Gallery MEDIUM 5.0
CVE-2006-1909

Directory traversal vulnerability in index.php in Coppermine 1.4.4 allows remote attackers to read arbitrary files via a .//./ (modified dot dot slas…

No fix yet
Fix from $1,600 2006-04-20
Coppermine Photo Gallery MEDIUM 5.0
CVE-2006-0872

Directory traversal vulnerability in init.inc.php in Coppermine Photo Gallery 1.4.3 and earlier allows remote attackers to include arbitrary files vi…

Patch available
Fix from $1,600 2006-02-24
Coppermine Photo Gallery MEDIUM 5.0
CVE-2006-0873

Absolute path traversal vulnerability in docs/showdocs.php in Coppermine Photo Gallery 1.4.3 and earlier allows remote attackers to include arbitrary…

Patch available
Fix from $1,600 2006-02-24
Coppermine Photo Gallery HIGH 7.5
CVE-2005-1225

SQL injection vulnerability in Coppermine Photo Gallery 1.3.2 allows remote attackers to execute arbitrary SQL commands via the favs parameter to (1)…

Patch available
Fix from $1,950 2005-05-02
Coppermine Photo Gallery HIGH 7.5
CVE-2005-1226

Coppermine Photo Gallery 1.3.2 stores passwords in plaintext, which allows remote attackers to obtain sensitive information.

Patch available
Fix from $1,950 2005-05-02
Coppermine Photo Gallery MEDIUM 5.0
CVE-2004-1984

Coppermine Photo Gallery 1.2.2b and 1.2.0 RC4 allows remote attackers to obtain sensitive information via a direct HTTP request to (1) phpinfo.php, (…

No fix yet
Fix from $1,600 2004-05-02
Coppermine Photo Gallery HIGH 7.5
CVE-2004-1987EPSS 10%

picmgmtbatch.inc.php in Coppermine Photo Gallery 1.2.2b and 1.2.0 RC4 allows remote attackers with administrative privileges to execute arbitrary com…

No fix yet
Fix from $1,950 2004-04-30
Coppermine Photo Gallery HIGH 7.5
CVE-2004-1988EPSS 9%

PHP remote file inclusion vulnerability in init.inc.php in Coppermine Photo Gallery 1.2.0 RC4 allows remote attackers to execute arbitrary PHP code b…

No fix yet
Fix from $1,950 2004-04-30
Coppermine Photo Gallery HIGH 7.5
CVE-2004-1989EPSS 9%

PHP remote file inclusion vulnerability in theme.php in Coppermine Photo Gallery 1.2.2b allows remote attackers to execute arbitrary PHP code by modi…

No fix yet
Fix from $1,950 2004-04-30
Coppermine Photo Gallery MEDIUM 5.0
CVE-2004-1986EPSS 11%

Directory traversal vulnerability in modules.php in Coppermine Photo Gallery 1.2.2b and 1.2.0 RC4 allows remote attackers with administrative privile…

No fix yet
Fix from $1,600 2004-04-04