Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo

Multimedia

Coppermine

Coppermine is a multi-purpose fully-featured and integrated web picture gallery

Official Site:

http://coppermine-gallery.net/

Severity Summary:

High: 2 Medium: 14 Low: 2
Reference
Title
Severity
CVE-2008-3481
Coppermine Improper Control of Generation of Code (Code Injection) Vulnerability
High
CVE-2008-3486
Coppermine Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) Vulnerability
High
CVE-2005-3979
Coppermine Improper Authentication Vulnerability
Medium
CVE-2010-4667
Coppermine Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2008-0504
Coppermine Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability
Medium
CVE-2008-7186
Coppermine Permissions Privileges and Access Controls Vulnerability
Medium
CVE-2008-7187
Coppermine Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
Medium
CVE-2010-4693
Coppermine Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2011-2476
Coppermine Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2015-3922
Coppermine Open Redirection Vulnerability
Medium
CVE-2011-3722
Coppermine Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
Medium
CVE-2012-1614
Coppermine Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
Medium
CVE-2015-3923
Coppermine Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
Medium
CVE-2014-4612
Coppermine Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2018-14478
Coppermine Cross-site Scripting (XSS) Vulnerability
Medium
CVE-2015-6528
Coppermine Multiple Cross-site Scripting (XSS) Vulnerabilities
Medium
CVE-2012-1613
Coppermine Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Low
CVE-2015-3921
Coppermine Cross-site Scripting (XSS) Vulnerability
Low