CVE-2011-2476

Coppermine-gallery Coppermine Photo Gallery - XSS

Title source: rule

Description

Cross-site scripting (XSS) vulnerability in Coppermine Photo Gallery (CPG) before 1.5.12 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2010-4667.

References (5)

[Various Sources] http://forum.coppermine-gallery.net/index.php/topic%2C69495.0.html

[Product] http://sourceforge.net/news/?group_id=89658

[Patch] http://www.openwall.com/lists/oss-security/2011/06/08/2

[Patch] http://www.openwall.com/lists/oss-security/2011/06/08/6

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/68058

Scores

EPSS 0.0029

EPSS Percentile 51.8%

Classification

CWE

CWE-79

Status published

Affected Products (50)

coppermine-gallery/coppermine_photo_gallery

... and 35 more

Timeline

Published Jun 14, 2011

Tracked Since Feb 18, 2026