CVE-2007-1107

This exploit targets a SQL injection vulnerability in Coppermine Photo Gallery (CPG) 1.4.10 via cookie manipulation. It uses blind SQL injection to extract admin credentials by leveraging the 'album' parameter and serialized cookie data.

This exploit targets a SQL injection vulnerability in Coppermine Gallery 1.4.10, leveraging deserialization and cookie manipulation to write a PHP web shell to the target system. It automates the process of retrieving necessary paths and prefixes before executing the payload.

This exploit leverages a blind SQL injection vulnerability in Coppermine Photo Gallery 1.3.x via the 'cpg131_fav' cookie parameter. It extracts user credentials by brute-forcing each character of the username and password through conditional SQL queries.