[Forgot Password]
Login  Register Subscribe

30389

 
 

423868

 
 

244625

 
 

909

 
 

193379

 
 

277

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2012-1613Date: (C)2012-09-04   (M)2023-12-22


Cross-site scripting (XSS) vulnerability in edit_one_pic.php in Coppermine Photo Gallery before 1.5.20 allows remote authenticated users with certain privileges to inject arbitrary web script or HTML via the keywords parameter.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 3.5
Exploit Score: 6.8
Impact Score: 2.9
 
CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: SINGLE
Confidentiality: NONE
Integrity: PARTIAL
Availability: NONE
  
Reference:
EXPLOIT-DB-18680
http://archives.neohapsis.com/archives/bugtraq/2012-03/0167.html
SECUNIA-48643
BID-52818
OSVDB-80731
http://www.openwall.com/lists/oss-security/2012/03/30/5
http://www.openwall.com/lists/oss-security/2012/03/30/6
http://www.openwall.com/lists/oss-security/2012/04/03/6
http://coppermine.svn.sourceforge.net/viewvc/coppermine/trunk/cpg1.6.x/edit_one_pic.php?r1=8348&r2=8354
http://forum.coppermine-gallery.net/index.php/topic%2C74682.0.html
http://packetstormsecurity.org/files/111369/Coppermine-1.5.18-Cross-Site-Scripting-Path-Disclosure.html
http://www.waraxe.us/advisory-81.html

CPE    58
cpe:/a:coppermine-gallery:coppermine_photo_gallery:1.5.6
cpe:/a:coppermine-gallery:coppermine_photo_gallery:1.3.5
cpe:/a:coppermine-gallery:coppermine_photo_gallery:1.5.4
cpe:/a:coppermine-gallery:coppermine_photo_gallery:1.4.0:alpha
...
CWE    1
CWE-79

© SecPod Technologies