Coppermine-Gallery: >> Coppermine Photo Gallery >> 1.4.2 Security Vulnerabilities
themes/sample/theme.php in Coppermine Photo Gallery (CPG) 1.4.18 and earlier allows remote attackers to obtain sensitive information via a direct request, which reveals the installation path in an error message.
CVSS Score
7.5
EPSS Score
0.013
Published
2008-08-05
Multiple SQL injection vulnerabilities in Coppermine Photo Gallery (CPG) before 1.4.15 allow remote authenticated administrators to execute arbitrary SQL commands via the (1) albumid, (2) startpic, and (3) numpics parameters to util.php; and (4) cid_array parameter to reviewcom.php.
CVSS Score
6.5
EPSS Score
0.006
Published
2008-01-31
relocate_server.php in Coppermine Photo Gallery (CPG) 1.4.2 and 1.4 beta is not removed after installation and does not use authentication, which allows remote attackers to obtain sensitive information, such as database configuration, via a direct request.
CVSS Score
5.0
EPSS Score
0.006
Published
2005-12-03
Page 2