CVE-2007-0122
Multiple SQL injection vulnerabilities in Coppermine Photo Gallery 1.4.10 and earlier allow remote authenticated administrators to execute arbitrary SQL commands via (1) the cat parameter to albmgr.php, and possibly (2) the gid parameter to usermgr.php;…
Does this matter?
Lower severity and a low EPSS score (3.12%). Track it; it rarely justifies an emergency change on its own.
Description
Multiple SQL injection vulnerabilities in Coppermine Photo Gallery 1.4.10 and earlier allow remote authenticated administrators to execute arbitrary SQL commands via (1) the cat parameter to albmgr.php, and possibly (2) the gid parameter to usermgr.php; (3) the start parameter to db_ecard.php; and the albumid parameter to unspecified files, related to the (4) filename_to_title and (5) del_titles functions.
- CVSS 2.0
- 6.5 MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P
- EPSS
- 3.12% probability · 87th percentile
- CISA KEV
- Not listed
- Affected
- coppermine/coppermine photo gallery
- Source
- cve@mitre.org
References
- http://acid-root.new.fr/poc/19070104.txt
- http://osvdb.org/35852
- http://osvdb.org/35853
- http://osvdb.org/35854
- http://osvdb.org/35855
- http://osvdb.org/35856
- http://secunia.com/advisories/25846
- http://securityreason.com/securityalert/2123
- http://www.securityfocus.com/archive/1/456051/100/0/threaded
- http://www.securityfocus.com/bid/21894Exploit
- https://www.exploit-db.com/exploits/3085
- http://acid-root.new.fr/poc/19070104.txt
- http://osvdb.org/35852
- http://osvdb.org/35853
- http://osvdb.org/35854
- http://osvdb.org/35855
- http://osvdb.org/35856
- http://secunia.com/advisories/25846
- http://securityreason.com/securityalert/2123
- http://www.securityfocus.com/archive/1/456051/100/0/threaded
- http://www.securityfocus.com/bid/21894Exploit
- https://www.exploit-db.com/exploits/3085
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.