33133vdb entry
http://osvdb.org/33133 CVE-2007-1107
Coppermine Photo Gallery 1.3.x - Blind SQL Injection
Record summary
CVE-2007-1107 has a selected CVSS score of 7.5; EIP currently links 3 catalogued exploits.
Description
SQL injection vulnerability in thumbnails.php in Coppermine Photo Gallery (CPG) 1.3.x allows remote authenticated users to execute arbitrary SQL commands via a cpg131_fav cookie. NOTE: it was later reported that 1.4.10, 1.4.14, and other 1.4.x versions are also affected using similar cookies.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 3
Proofs of concept
3Catalogued exploits
ExploitDBCoppermine Photo Gallery 1.3.x - Blind SQL InjectionExploitDB exploitby s0cratexNot analyzed1 file
ExploitDBCoppermine Photo Gallery 1.4.10 - 'cpg1410_xek.php' SQL InjectionExploitDB exploitby bazikNot analyzed1 file
ExploitDBCoppermine Photo Gallery 1.4.10 - SQL InjectionExploitDB exploitby RST/GHCNot analyzed1 file
References
112297Third-party advisory
http://securityreason.com/securityalert/2297 20070224 Coppermine Photo Gallery 1.3.x Blind SQL Injection Exploitmailing list
http://www.securityfocus.com/archive/1/461158/100/0/threaded 22709vdb entry
http://www.securityfocus.com/bid/22709 27372vdb entry
http://www.securityfocus.com/bid/27372 coppermine-thumbnails-sql-injection(32688)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/32688 copperminephoto-thumbnails-sql-injection(39806)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/39806 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2007-1107 3371exploit
https://www.exploit-db.com/exploits/3371 4950exploit
https://www.exploit-db.com/exploits/4950 4961exploit
https://www.exploit-db.com/exploits/4961