Multimedia

Coppermine

Coppermine is a multi-purpose fully-featured and integrated web picture gallery

Official Site:

http://coppermine-gallery.net/

Severity Summary:

High: 2 Medium: 14 Low: 2

Reference

Title

Severity

CVE-2008-3481

Coppermine Improper Control of Generation of Code (Code Injection) Vulnerability

High

CVE-2008-3486

Coppermine Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) Vulnerability

High

CVE-2005-3979

Coppermine Improper Authentication Vulnerability

Medium

CVE-2010-4667

Coppermine Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Medium

CVE-2008-0504

Coppermine Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability

Medium

CVE-2008-7186

Coppermine Permissions Privileges and Access Controls Vulnerability

Medium

CVE-2008-7187

Coppermine Exposure of Sensitive Information to an Unauthorized Actor Vulnerability

Medium

CVE-2010-4693

Coppermine Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Medium

CVE-2011-2476

Coppermine Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Medium

CVE-2015-3922

Coppermine Open Redirection Vulnerability

Medium

CVE-2011-3722

Coppermine Exposure of Sensitive Information to an Unauthorized Actor Vulnerability

Medium

CVE-2012-1614

Coppermine Exposure of Sensitive Information to an Unauthorized Actor Vulnerability

Medium

CVE-2015-3923

Coppermine Exposure of Sensitive Information to an Unauthorized Actor Vulnerability

Medium

CVE-2014-4612

Coppermine Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Medium

CVE-2018-14478

Coppermine Cross-site Scripting (XSS) Vulnerability

Medium

CVE-2015-6528

Coppermine Multiple Cross-site Scripting (XSS) Vulnerabilities

Medium

CVE-2012-1613

Coppermine Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Low

CVE-2015-3921

Coppermine Cross-site Scripting (XSS) Vulnerability

Low