Exploitation Summary
EIP tracks 3 public exploits for CVE-2007-1107. PoCs published by RST/GHC, bazik, s0cratex.
AI-analyzed exploit summary This exploit targets a SQL injection vulnerability in Coppermine Photo Gallery (CPG) 1.4.10 via cookie manipulation. It uses blind SQL injection to extract admin credentials by leveraging the 'album' parameter and serialized cookie data.
Description
SQL injection vulnerability in thumbnails.php in Coppermine Photo Gallery (CPG) 1.3.x allows remote authenticated users to execute arbitrary SQL commands via a cpg131_fav cookie. NOTE: it was later reported that 1.4.10, 1.4.14, and other 1.4.x versions are also affected using similar cookies.
Exploits (3)
This exploit targets a SQL injection vulnerability in Coppermine Photo Gallery (CPG) 1.4.10 via cookie manipulation. It uses blind SQL injection to extract admin credentials by leveraging the 'album' parameter and serialized cookie data.
This exploit targets a SQL injection vulnerability in Coppermine Gallery 1.4.10, leveraging deserialization and cookie manipulation to write a PHP web shell to the target system. It automates the process of retrieving necessary paths and prefixes before executing the payload.
This exploit leverages a blind SQL injection vulnerability in Coppermine Photo Gallery 1.3.x via the 'cpg131_fav' cookie parameter. It extracts user credentials by brute-forcing each character of the username and password through conditional SQL queries.