CVE-2007-0122

Coppermine Photo Gallery < 1.4.10 - SQL Injection

Title source: rule

Description

Multiple SQL injection vulnerabilities in Coppermine Photo Gallery 1.4.10 and earlier allow remote authenticated administrators to execute arbitrary SQL commands via (1) the cat parameter to albmgr.php, and possibly (2) the gid parameter to usermgr.php; (3) the start parameter to db_ecard.php; and the albumid parameter to unspecified files, related to the (4) filename_to_title and (5) del_titles functions.

Exploits (2)

exploitdb WORKING POC VERIFIED

by DarkFig · phpwebappsphp

https://www.exploit-db.com/exploits/3085

View Code ZIP pw:eip

exploitdb WORKING POC VERIFIED

by DarkFig · phpwebappsphp

https://www.exploit-db.com/exploits/29397

View Code ZIP pw:eip

References (11)

[Various Sources] http://acid-root.new.fr/poc/19070104.txt

[Third Party Advisory, VDB Entry] http://osvdb.org/35852

[Third Party Advisory, VDB Entry] http://osvdb.org/35853

[Third Party Advisory, VDB Entry] http://osvdb.org/35854

[Exploit] http://www.securityfocus.com/bid/21894

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/456051/100/0/threaded

[Exploit, Third Party Advisory] https://www.exploit-db.com/exploits/3085

[Third Party Advisory, VDB Entry] http://osvdb.org/35855

[Third Party Advisory, VDB Entry] http://osvdb.org/35856

[Third Party Advisory] http://secunia.com/advisories/25846

[Third Party Advisory] http://securityreason.com/securityalert/2123

Scores

EPSS 0.0358

EPSS Percentile 87.5%

Classification

Status draft

Affected Products (15)

coppermine/coppermine_photo_gallery < 1.4.10

coppermine/coppermine_photo_gallery

coppermine/coppermine_photo_gallery

coppermine/coppermine_photo_gallery

coppermine/coppermine_photo_gallery

coppermine/coppermine_photo_gallery

coppermine/coppermine_photo_gallery

coppermine/coppermine_photo_gallery

coppermine/coppermine_photo_gallery

coppermine/coppermine_photo_gallery

coppermine/coppermine_photo_gallery

coppermine/coppermine_photo_gallery

coppermine/coppermine_photo_gallery

coppermine/coppermine_photo_gallery

coppermine/coppermine_photo_gallery

Timeline

Published Jan 09, 2007

Tracked Since Feb 18, 2026