Coppermine Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2014-4612 - Vulnerability Database

Coppermine

Coppermine Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2014-4612

Medium

Reference: CVE-2014-4612

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2014-4612

Title: Coppermine Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Overview:

Cross-site scripting (XSS) vulnerability in the keywords manager (keywordmgr.php) in Coppermine Photo Gallery before 1.5.27 and 1.6.x before 1.6.01 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.