Page 5 of 48 results (0.003 seconds)

CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 1

CVE-2005-1226

https://notcve.org/view.php?id=CVE-2005-1226

22 Apr 2005 — Coppermine Photo Gallery 1.3.2 stores passwords in plaintext, which allows remote attackers to obtain sensitive information. • http://marc.info/?l=bugtraq&m=111402186304179&w=2 •

CVSS: 6.1EPSS: 0%CPEs: 7EXPL: 0

CVE-2005-1172

https://notcve.org/view.php?id=CVE-2005-1172

18 Apr 2005 — Cross-site scripting (XSS) vulnerability in init.inc.php in Coppermine Photo Gallery 1.3.x allows remote attackers to inject arbitrary web script or HTML via the X-Forwarded-For parameter. • http://coppermine.sourceforge.net/board/index.php?topic=17134 •

CVSS: 7.5EPSS: 0%CPEs: 11EXPL: 2

CVE-2004-1984

https://notcve.org/view.php?id=CVE-2004-1984

02 May 2004 — Coppermine Photo Gallery 1.2.2b and 1.2.0 RC4 allows remote attackers to obtain sensitive information via a direct HTTP request to (1) phpinfo.php, (2) addpic.php, (3) config.php, (4) db_input.php, (5) displayecard.php, (6) ecard.php, (7) crop.inc.php, which reveal the full path in a PHP error message. • http://marc.info/?l=bugtraq&m=108360247732014&w=2 •

CVSS: 6.1EPSS: 0%CPEs: 11EXPL: 2

CVE-2004-1985 – Coppermine Photo Gallery 1.2.2b - 'menu.inc.php' Cross-Site Scripting

https://notcve.org/view.php?id=CVE-2004-1985

30 Apr 2004 — Cross-site scripting (XSS) vulnerability in menu.inc.php in Coppermine Photo Gallery 1.2.2b allows remote attackers to inject arbitrary HTML or web script via the CPG_URL parameter. • https://www.exploit-db.com/exploits/24072 •

CVSS: 9.8EPSS: 0%CPEs: 11EXPL: 3

CVE-2004-1987

https://notcve.org/view.php?id=CVE-2004-1987

30 Apr 2004 — picmgmtbatch.inc.php in Coppermine Photo Gallery 1.2.2b and 1.2.0 RC4 allows remote attackers with administrative privileges to execute arbitrary commands via shell metacharacters in the (1) $CONFIG['impath'] or (2) $CONFIG['jpeg_qual'] parameters. • http://marc.info/?l=bugtraq&m=108360247732014&w=2 •

CVSS: 9.8EPSS: 0%CPEs: 11EXPL: 4

CVE-2004-1988 – Coppermine Photo Gallery 1.2.0 RC4 - 'init.inc.php' Remote File Inclusion

https://notcve.org/view.php?id=CVE-2004-1988

30 Apr 2004 — PHP remote file inclusion vulnerability in init.inc.php in Coppermine Photo Gallery 1.2.0 RC4 allows remote attackers to execute arbitrary PHP code by modifying the CPG_M_DIR to reference a URL on a remote web server that contains functions.inc.php. • https://www.exploit-db.com/exploits/24074 •

CVSS: 9.8EPSS: 0%CPEs: 11EXPL: 4

CVE-2004-1989 – Coppermine Photo Gallery 1.2.2b - 'theme.php' Remote File Inclusion

https://notcve.org/view.php?id=CVE-2004-1989

30 Apr 2004 — PHP remote file inclusion vulnerability in theme.php in Coppermine Photo Gallery 1.2.2b allows remote attackers to execute arbitrary PHP code by modifying the THEME_DIR parameter to reference a URL on a remote web server that contains user_list_info_box.inc. • https://www.exploit-db.com/exploits/24075 •

CVSS: 7.5EPSS: 0%CPEs: 11EXPL: 4

CVE-2004-1986 – Coppermine Photo Gallery 1.2.0 RC4 - 'startdir' Traversal Arbitrary File Access

https://notcve.org/view.php?id=CVE-2004-1986

04 Apr 2004 — Directory traversal vulnerability in modules.php in Coppermine Photo Gallery 1.2.2b and 1.2.0 RC4 allows remote attackers with administrative privileges to read arbitrary files via a .. (dot dot) in the startdir parameter. • https://www.exploit-db.com/exploits/24073 •