Description
Cross-site scripting (XSS) vulnerability in Coppermine Photo Gallery (CPG) before 1.5.12 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2010-4667.
References (5)
Core 5
Core References
Patch mailing-list
x_refsource_mlist
http://www.openwall.com/lists/oss-security/2011/06/08/2
Patch mailing-list
x_refsource_mlist
http://www.openwall.com/lists/oss-security/2011/06/08/6
Various Sources x_refsource_confirm
http://forum.coppermine-gallery.net/index.php/topic%2C69495.0.html
Product x_refsource_confirm
http://sourceforge.net/news/?group_id=89658
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/68058
Scores
EPSS
0.0109
EPSS Percentile
61.8%
Details
CWE
CWE-79
Status
published
Products (41)
coppermine-gallery/coppermine_photo_gallery
coppermine-gallery/coppermine_photo_gallery
1.0 (2 CPE variants)
coppermine-gallery/coppermine_photo_gallery
1.1 (2 CPE variants)
coppermine-gallery/coppermine_photo_gallery
1.1.0
coppermine-gallery/coppermine_photo_gallery
1.2
coppermine-gallery/coppermine_photo_gallery
1.2.0 (2 CPE variants)
coppermine-gallery/coppermine_photo_gallery
1.2.1 (3 CPE variants)
coppermine-gallery/coppermine_photo_gallery
1.3.0
coppermine-gallery/coppermine_photo_gallery
1.3.1
coppermine-gallery/coppermine_photo_gallery
1.3.2
... and 31 more
Published
Jun 14, 2011
Tracked Since
Feb 18, 2026