Skip to content
Noroxi

Coppermine records

35 published records for vendor coppermine.

Researcher profile

Entered KEV
0 · 0%
Weaponized
1 · 2.9%
Pre-auth RCE
13
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    35 records
    • CVE-2008-0506
      45Plan

      include/imageObjectIM.class.php in Coppermine Photo Gallery (CPG) before 1.4.15, when the ImageMagick picture processing method is configure

      MediumCVSS 6.8WeaponizedEPSS 58%

      coppermine · coppermine photo galleryJan 31, 2008

    • CVE-2007-1414
      42Plan

      Multiple PHP remote file inclusion vulnerabilities in Coppermine Photo Gallery (CPG) allow remote attackers to execute arbitrary PHP code vi

      CriticalCVSS 10.0No exploitEPSS 5%

      coppermine · coppermine photo galleryMar 12, 2007

    • CVE-2004-1987
      33Monitor

      picmgmtbatch.inc.php in Coppermine Photo Gallery 1.2.2b and 1.2.0 RC4 allows remote attackers with administrative privileges to execute arbi

      HighCVSS 7.5No exploitEPSS 10%

      coppermine · coppermine photo galleryApr 30, 2004

    • CVE-2004-1989
      33Monitor

      PHP remote file inclusion vulnerability in theme.php in Coppermine Photo Gallery 1.2.2b allows remote attackers to execute arbitrary PHP cod

      HighCVSS 7.5Proof of conceptEPSS 9%

      coppermine · coppermine photo galleryApr 30, 2004

    • CVE-2004-1988
      33Monitor

      PHP remote file inclusion vulnerability in init.inc.php in Coppermine Photo Gallery 1.2.0 RC4 allows remote attackers to execute arbitrary P

      HighCVSS 7.5Proof of conceptEPSS 9%

      coppermine · coppermine photo galleryApr 30, 2004

    • CVE-2007-4283
      31Monitor

      PHP remote file inclusion vulnerability in bridge/yabbse.inc.php in Coppermine Photo Gallery (CPG) 1.3.1 allows remote attackers to execute

      HighCVSS 7.5Proof of conceptEPSS 3%

      coppermine · coppermine photo galleryAug 9, 2007

    • CVE-2006-4321
      31Monitor

      PHP remote file inclusion vulnerability in cpg.php in the Coppermine Photo Gallery component (com_cpg) 1.0 and earlier for Mambo allows remo

      HighCVSS 7.5Proof of conceptEPSS 3%

      coppermine · coppermine photo galleryAug 23, 2006

    • CVE-2007-1107
      31Monitor

      SQL injection vulnerability in thumbnails.php in Coppermine Photo Gallery (CPG) 1.3.x allows remote authenticated users to execute arbitrary

      HighCVSS 7.5Proof of conceptEPSS 2%

      coppermine · coppermine photo galleryFeb 26, 2007

    • CVE-2005-1226
      31Monitor

      Coppermine Photo Gallery 1.3.2 stores passwords in plaintext, which allows remote attackers to obtain sensitive information.

      HighCVSS 7.5No exploitEPSS 1%

      coppermine · coppermine photo galleryMay 2, 2005

    • CVE-2006-2514
      30Monitor

      Coppermine galleries before 1.4.6, when running on Apache with mod_mime installed, allows remote attackers to upload arbitrary files via a f

      HighCVSS 7.5No exploitEPSS 1%

      coppermine · coppermine photo galleryMay 22, 2006

    • CVE-2006-2976
      30Monitor

      Unspecified vulnerability in usermgr.php in Coppermine Photo Gallery before 1.4.7 has unknown impact and remote attack vectors, possibly rel

      HighCVSS 7.5No exploitEPSS 1%

      coppermine · coppermine photo galleryJun 12, 2006

    • CVE-2006-3064
      30Monitor

      SQL injection vulnerability in the add_hit function in include/function.inc.php in Coppermine Photo Gallery (CPG) 1.4.8, when "Keep detailed

      HighCVSS 7.5No exploitEPSS 1%

      coppermine · coppermine photo galleryJun 19, 2006

    • CVE-2005-1225
      30Monitor

      SQL injection vulnerability in Coppermine Photo Gallery 1.3.2 allows remote attackers to execute arbitrary SQL commands via the favs paramet

      HighCVSS 7.5No exploitEPSS 1%

      coppermine · coppermine photo galleryMay 2, 2005

    • CVE-2006-5622
      30Monitor

      SQL injection vulnerability in picmgr.php in Coppermine Photo Gallery 1.4.9 allows remote attackers to execute arbitrary SQL commands via th

      HighCVSS 7.5Proof of conceptEPSS 1%

      coppermine · coppermine photo galleryOct 31, 2006

    • CVE-2007-3558
      30Monitor

      SQL injection vulnerability in Coppermine Photo Gallery (CPG) before 1.4.11 allows remote attackers to execute arbitrary SQL commands via an

      HighCVSS 7.5Proof of conceptEPSS 1%

      coppermine · coppermine photo galleryJul 4, 2007

    • CVE-2007-4976
      29Monitor

      Directory traversal vulnerability in viewlog.php in Coppermine Photo Gallery (CPG) 1.4.12 and earlier allows remote authenticated administra

      MediumCVSS 6.5Proof of conceptEPSS 8%

      coppermine · coppermine photo gallerySep 19, 2007

    • CVE-2008-1841
      28Monitor

      SQL injection vulnerability in the session handling functionality in bridge/coppermine.inc.php in Coppermine Photo Gallery (CPG) 1.4.17 and

      MediumCVSS 6.8No exploitEPSS 1%

      coppermine · coppermine photo galleryApr 16, 2008

    • CVE-2007-0122
      27Monitor

      Multiple SQL injection vulnerabilities in Coppermine Photo Gallery 1.4.10 and earlier allow remote authenticated administrators to execute a

      MediumCVSS 6.5Proof of conceptEPSS 3%

      coppermine · coppermine photo galleryJan 8, 2007

    • CVE-2008-1840
      27Monitor

      SQL injection vulnerability in upload.php in Coppermine Photo Gallery (CPG) 1.4.16 and earlier allows remote authenticated users or user-ass

      MediumCVSS 6.5No exploitEPSS 1%

      coppermine · coppermine photo galleryApr 16, 2008

    • CVE-2007-0835
      26Monitor

      admin.php in Coppermine Photo Gallery 1.4.10, and possibly earlier, allows remote authenticated users to execute arbitrary shell commands vi

      MediumCVSS 6.5No exploitEPSS 1%

      coppermine · coppermine photo galleryFeb 7, 2007

    • CVE-2007-0115
      24Monitor

      Static code injection vulnerability in Coppermine Photo Gallery 1.4.10 and earlier allows remote authenticated administrators to execute arb

      MediumCVSS 6.0No exploitEPSS 1%

      coppermine · coppermine photo galleryJan 8, 2007

    • CVE-2004-1986
      23Monitor

      Directory traversal vulnerability in modules.php in Coppermine Photo Gallery 1.2.2b and 1.2.0 RC4 allows remote attackers with administrativ

      MediumCVSS 5.0Proof of conceptEPSS 10%

      coppermine · coppermine photo galleryApr 4, 2004

    • CVE-2006-1909
      21Monitor

      Directory traversal vulnerability in index.php in Coppermine 1.4.4 allows remote attackers to read arbitrary files via a .//./ (modified dot

      MediumCVSS 5.0Proof of conceptEPSS 3%

      coppermine · coppermine photo galleryApr 20, 2006

    • CVE-2004-1984
      21Monitor

      Coppermine Photo Gallery 1.2.2b and 1.2.0 RC4 allows remote attackers to obtain sensitive information via a direct HTTP request to (1) phpin

      MediumCVSS 5.0No exploitEPSS 2%

      coppermine · coppermine photo galleryMay 2, 2004

    • CVE-2006-0872
      21Monitor

      Directory traversal vulnerability in init.inc.php in Coppermine Photo Gallery 1.4.3 and earlier allows remote attackers to include arbitrary

      MediumCVSS 5.0No exploitEPSS 2%

      coppermine · coppermine photo galleryFeb 24, 2006