Записи Coppermine
35 опубликованных записей вендора coppermine.
Профиль для исследователя
- Попали в KEV
- 0 · 0 %
- С эксплойтом
- 1 · 2,9 %
- Pre-auth RCE
- 13
- С записью об исправлении
- 0 %
- Медиана: публикация → KEV
- Ни одна запись не попала в KEV
Записи по годам
Столбик: всего · тёмная часть: CISA KEV.
Повторяющиеся классы
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')3
- CWE-20 Improper Input Validation1
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
Классы уязвимостей, которые чаще всего встречаются у этого вендора: куда смотреть.
CWEВсе записи
35 записей| Срочность | CVE | Уязвимость | Критичность | KEV | EPSS | Опубликовано |
|---|---|---|---|---|---|---|
45В плане | CVE-2008-0506Готовый эксплойт | include/imageObjectIM.class.php in Coppermine Photo Gallery (CPG) before 1.4.15, when the ImageMagick picture processing method is configurecoppermine · coppermine photo gallery · CWE-20 | Средняя6,8 | — | 58,9 % | 31 янв. 2008 г. |
42В плане | CVE-2007-1414Эксплойта нет | Multiple PHP remote file inclusion vulnerabilities in Coppermine Photo Gallery (CPG) allow remote attackers to execute arbitrary PHP code vicoppermine · coppermine photo gallery | Критическая10,0 | — | 5,3 % | 12 мар. 2007 г. |
33Наблюдать | CVE-2004-1987Эксплойта нет | picmgmtbatch.inc.php in Coppermine Photo Gallery 1.2.2b and 1.2.0 RC4 allows remote attackers with administrative privileges to execute arbicoppermine · coppermine photo gallery | Высокая7,5 | — | 10,1 % | 30 апр. 2004 г. |
33Наблюдать | CVE-2004-1989Proof of concept | PHP remote file inclusion vulnerability in theme.php in Coppermine Photo Gallery 1.2.2b allows remote attackers to execute arbitrary PHP codcoppermine · coppermine photo gallery | Высокая7,5 | — | 9,3 % | 30 апр. 2004 г. |
33Наблюдать | CVE-2004-1988Proof of concept | PHP remote file inclusion vulnerability in init.inc.php in Coppermine Photo Gallery 1.2.0 RC4 allows remote attackers to execute arbitrary Pcoppermine · coppermine photo gallery | Высокая7,5 | — | 9,3 % | 30 апр. 2004 г. |
31Наблюдать | CVE-2007-4283Proof of concept | PHP remote file inclusion vulnerability in bridge/yabbse.inc.php in Coppermine Photo Gallery (CPG) 1.3.1 allows remote attackers to execute coppermine · coppermine photo gallery | Высокая7,5 | — | 3,3 % | 9 авг. 2007 г. |
31Наблюдать | CVE-2006-4321Proof of concept | PHP remote file inclusion vulnerability in cpg.php in the Coppermine Photo Gallery component (com_cpg) 1.0 and earlier for Mambo allows remocoppermine · coppermine photo gallery | Высокая7,5 | — | 3,2 % | 23 авг. 2006 г. |
31Наблюдать | CVE-2007-1107Proof of concept | SQL injection vulnerability in thumbnails.php in Coppermine Photo Gallery (CPG) 1.3.x allows remote authenticated users to execute arbitrarycoppermine · coppermine photo gallery | Высокая7,5 | — | 2,1 % | 26 февр. 2007 г. |
31Наблюдать | CVE-2005-1226Эксплойта нет | Coppermine Photo Gallery 1.3.2 stores passwords in plaintext, which allows remote attackers to obtain sensitive information.coppermine · coppermine photo gallery | Высокая7,5 | — | 1,7 % | 2 мая 2005 г. |
30Наблюдать | CVE-2006-2514Эксплойта нет | Coppermine galleries before 1.4.6, when running on Apache with mod_mime installed, allows remote attackers to upload arbitrary files via a fcoppermine · coppermine photo gallery | Высокая7,5 | — | 1,5 % | 22 мая 2006 г. |
30Наблюдать | CVE-2006-2976Эксплойта нет | Unspecified vulnerability in usermgr.php in Coppermine Photo Gallery before 1.4.7 has unknown impact and remote attack vectors, possibly relcoppermine · coppermine photo gallery | Высокая7,5 | — | 1,4 % | 12 июн. 2006 г. |
30Наблюдать | CVE-2006-3064Эксплойта нет | SQL injection vulnerability in the add_hit function in include/function.inc.php in Coppermine Photo Gallery (CPG) 1.4.8, when "Keep detailedcoppermine · coppermine photo gallery · CWE-89 | Высокая7,5 | — | 1,2 % | 19 июн. 2006 г. |
30Наблюдать | CVE-2005-1225Эксплойта нет | SQL injection vulnerability in Coppermine Photo Gallery 1.3.2 allows remote attackers to execute arbitrary SQL commands via the favs parametcoppermine · coppermine photo gallery | Высокая7,5 | — | 1,2 % | 2 мая 2005 г. |
30Наблюдать | CVE-2006-5622Proof of concept | SQL injection vulnerability in picmgr.php in Coppermine Photo Gallery 1.4.9 allows remote attackers to execute arbitrary SQL commands via thcoppermine · coppermine photo gallery | Высокая7,5 | — | 1,1 % | 31 окт. 2006 г. |
30Наблюдать | CVE-2007-3558Proof of concept | SQL injection vulnerability in Coppermine Photo Gallery (CPG) before 1.4.11 allows remote attackers to execute arbitrary SQL commands via ancoppermine · coppermine photo gallery | Высокая7,5 | — | 1,0 % | 4 июл. 2007 г. |
29Наблюдать | CVE-2007-4976Proof of concept | Directory traversal vulnerability in viewlog.php in Coppermine Photo Gallery (CPG) 1.4.12 and earlier allows remote authenticated administracoppermine · coppermine photo gallery · CWE-22 | Средняя6,5 | — | 8,5 % | 19 сент. 2007 г. |
28Наблюдать | CVE-2008-1841Эксплойта нет | SQL injection vulnerability in the session handling functionality in bridge/coppermine.inc.php in Coppermine Photo Gallery (CPG) 1.4.17 and coppermine · coppermine photo gallery · CWE-89 | Средняя6,8 | — | 1,8 % | 16 апр. 2008 г. |
27Наблюдать | CVE-2007-0122Proof of concept | Multiple SQL injection vulnerabilities in Coppermine Photo Gallery 1.4.10 and earlier allow remote authenticated administrators to execute acoppermine · coppermine photo gallery | Средняя6,5 | — | 3,2 % | 8 янв. 2007 г. |
27Наблюдать | CVE-2008-1840Эксплойта нет | SQL injection vulnerability in upload.php in Coppermine Photo Gallery (CPG) 1.4.16 and earlier allows remote authenticated users or user-asscoppermine · coppermine photo gallery · CWE-89 | Средняя6,5 | — | 1,7 % | 16 апр. 2008 г. |
26Наблюдать | CVE-2007-0835Эксплойта нет | admin.php in Coppermine Photo Gallery 1.4.10, and possibly earlier, allows remote authenticated users to execute arbitrary shell commands vicoppermine · coppermine photo gallery | Средняя6,5 | — | 1,4 % | 7 февр. 2007 г. |
24Наблюдать | CVE-2007-0115Эксплойта нет | Static code injection vulnerability in Coppermine Photo Gallery 1.4.10 and earlier allows remote authenticated administrators to execute arbcoppermine · coppermine photo gallery | Средняя6,0 | — | 1,1 % | 8 янв. 2007 г. |
23Наблюдать | CVE-2004-1986Proof of concept | Directory traversal vulnerability in modules.php in Coppermine Photo Gallery 1.2.2b and 1.2.0 RC4 allows remote attackers with administrativcoppermine · coppermine photo gallery | Средняя5,0 | — | 10,6 % | 4 апр. 2004 г. |
21Наблюдать | CVE-2006-1909Proof of concept | Directory traversal vulnerability in index.php in Coppermine 1.4.4 allows remote attackers to read arbitrary files via a .//./ (modified dotcoppermine · coppermine photo gallery | Средняя5,0 | — | 3,7 % | 20 апр. 2006 г. |
21Наблюдать | CVE-2004-1984Эксплойта нет | Coppermine Photo Gallery 1.2.2b and 1.2.0 RC4 allows remote attackers to obtain sensitive information via a direct HTTP request to (1) phpincoppermine · coppermine photo gallery | Средняя5,0 | — | 2,5 % | 2 мая 2004 г. |
21Наблюдать | CVE-2006-0872Эксплойта нет | Directory traversal vulnerability in init.inc.php in Coppermine Photo Gallery 1.4.3 and earlier allows remote attackers to include arbitrarycoppermine · coppermine photo gallery | Средняя5,0 | — | 2,3 % | 24 февр. 2006 г. |
- CVE-2008-050645В плане
include/imageObjectIM.class.php in Coppermine Photo Gallery (CPG) before 1.4.15, when the ImageMagick picture processing method is configure
СредняяCVSS 6,8Готовый эксплойтEPSS 58 %coppermine · coppermine photo gallery31 янв. 2008 г.
- CVE-2007-141442В плане
Multiple PHP remote file inclusion vulnerabilities in Coppermine Photo Gallery (CPG) allow remote attackers to execute arbitrary PHP code vi
КритическаяCVSS 10,0Эксплойта нетEPSS 5 %coppermine · coppermine photo gallery12 мар. 2007 г.
- CVE-2004-198733Наблюдать
picmgmtbatch.inc.php in Coppermine Photo Gallery 1.2.2b and 1.2.0 RC4 allows remote attackers with administrative privileges to execute arbi
ВысокаяCVSS 7,5Эксплойта нетEPSS 10 %coppermine · coppermine photo gallery30 апр. 2004 г.
- CVE-2004-198933Наблюдать
PHP remote file inclusion vulnerability in theme.php in Coppermine Photo Gallery 1.2.2b allows remote attackers to execute arbitrary PHP cod
ВысокаяCVSS 7,5Proof of conceptEPSS 9 %coppermine · coppermine photo gallery30 апр. 2004 г.
- CVE-2004-198833Наблюдать
PHP remote file inclusion vulnerability in init.inc.php in Coppermine Photo Gallery 1.2.0 RC4 allows remote attackers to execute arbitrary P
ВысокаяCVSS 7,5Proof of conceptEPSS 9 %coppermine · coppermine photo gallery30 апр. 2004 г.
- CVE-2007-428331Наблюдать
PHP remote file inclusion vulnerability in bridge/yabbse.inc.php in Coppermine Photo Gallery (CPG) 1.3.1 allows remote attackers to execute
ВысокаяCVSS 7,5Proof of conceptEPSS 3 %coppermine · coppermine photo gallery9 авг. 2007 г.
- CVE-2006-432131Наблюдать
PHP remote file inclusion vulnerability in cpg.php in the Coppermine Photo Gallery component (com_cpg) 1.0 and earlier for Mambo allows remo
ВысокаяCVSS 7,5Proof of conceptEPSS 3 %coppermine · coppermine photo gallery23 авг. 2006 г.
- CVE-2007-110731Наблюдать
SQL injection vulnerability in thumbnails.php in Coppermine Photo Gallery (CPG) 1.3.x allows remote authenticated users to execute arbitrary
ВысокаяCVSS 7,5Proof of conceptEPSS 2 %coppermine · coppermine photo gallery26 февр. 2007 г.
- CVE-2005-122631Наблюдать
Coppermine Photo Gallery 1.3.2 stores passwords in plaintext, which allows remote attackers to obtain sensitive information.
ВысокаяCVSS 7,5Эксплойта нетEPSS 1 %coppermine · coppermine photo gallery2 мая 2005 г.
- CVE-2006-251430Наблюдать
Coppermine galleries before 1.4.6, when running on Apache with mod_mime installed, allows remote attackers to upload arbitrary files via a f
ВысокаяCVSS 7,5Эксплойта нетEPSS 1 %coppermine · coppermine photo gallery22 мая 2006 г.
- CVE-2006-297630Наблюдать
Unspecified vulnerability in usermgr.php in Coppermine Photo Gallery before 1.4.7 has unknown impact and remote attack vectors, possibly rel
ВысокаяCVSS 7,5Эксплойта нетEPSS 1 %coppermine · coppermine photo gallery12 июн. 2006 г.
- CVE-2006-306430Наблюдать
SQL injection vulnerability in the add_hit function in include/function.inc.php in Coppermine Photo Gallery (CPG) 1.4.8, when "Keep detailed
ВысокаяCVSS 7,5Эксплойта нетEPSS 1 %coppermine · coppermine photo gallery19 июн. 2006 г.
- CVE-2005-122530Наблюдать
SQL injection vulnerability in Coppermine Photo Gallery 1.3.2 allows remote attackers to execute arbitrary SQL commands via the favs paramet
ВысокаяCVSS 7,5Эксплойта нетEPSS 1 %coppermine · coppermine photo gallery2 мая 2005 г.
- CVE-2006-562230Наблюдать
SQL injection vulnerability in picmgr.php in Coppermine Photo Gallery 1.4.9 allows remote attackers to execute arbitrary SQL commands via th
ВысокаяCVSS 7,5Proof of conceptEPSS 1 %coppermine · coppermine photo gallery31 окт. 2006 г.
- CVE-2007-355830Наблюдать
SQL injection vulnerability in Coppermine Photo Gallery (CPG) before 1.4.11 allows remote attackers to execute arbitrary SQL commands via an
ВысокаяCVSS 7,5Proof of conceptEPSS 1 %coppermine · coppermine photo gallery4 июл. 2007 г.
- CVE-2007-497629Наблюдать
Directory traversal vulnerability in viewlog.php in Coppermine Photo Gallery (CPG) 1.4.12 and earlier allows remote authenticated administra
СредняяCVSS 6,5Proof of conceptEPSS 8 %coppermine · coppermine photo gallery19 сент. 2007 г.
- CVE-2008-184128Наблюдать
SQL injection vulnerability in the session handling functionality in bridge/coppermine.inc.php in Coppermine Photo Gallery (CPG) 1.4.17 and
СредняяCVSS 6,8Эксплойта нетEPSS 1 %coppermine · coppermine photo gallery16 апр. 2008 г.
- CVE-2007-012227Наблюдать
Multiple SQL injection vulnerabilities in Coppermine Photo Gallery 1.4.10 and earlier allow remote authenticated administrators to execute a
СредняяCVSS 6,5Proof of conceptEPSS 3 %coppermine · coppermine photo gallery8 янв. 2007 г.
- CVE-2008-184027Наблюдать
SQL injection vulnerability in upload.php in Coppermine Photo Gallery (CPG) 1.4.16 and earlier allows remote authenticated users or user-ass
СредняяCVSS 6,5Эксплойта нетEPSS 1 %coppermine · coppermine photo gallery16 апр. 2008 г.
- CVE-2007-083526Наблюдать
admin.php in Coppermine Photo Gallery 1.4.10, and possibly earlier, allows remote authenticated users to execute arbitrary shell commands vi
СредняяCVSS 6,5Эксплойта нетEPSS 1 %coppermine · coppermine photo gallery7 февр. 2007 г.
- CVE-2007-011524Наблюдать
Static code injection vulnerability in Coppermine Photo Gallery 1.4.10 and earlier allows remote authenticated administrators to execute arb
СредняяCVSS 6,0Эксплойта нетEPSS 1 %coppermine · coppermine photo gallery8 янв. 2007 г.
- CVE-2004-198623Наблюдать
Directory traversal vulnerability in modules.php in Coppermine Photo Gallery 1.2.2b and 1.2.0 RC4 allows remote attackers with administrativ
СредняяCVSS 5,0Proof of conceptEPSS 10 %coppermine · coppermine photo gallery4 апр. 2004 г.
- CVE-2006-190921Наблюдать
Directory traversal vulnerability in index.php in Coppermine 1.4.4 allows remote attackers to read arbitrary files via a .//./ (modified dot
СредняяCVSS 5,0Proof of conceptEPSS 3 %coppermine · coppermine photo gallery20 апр. 2006 г.
- CVE-2004-198421Наблюдать
Coppermine Photo Gallery 1.2.2b and 1.2.0 RC4 allows remote attackers to obtain sensitive information via a direct HTTP request to (1) phpin
СредняяCVSS 5,0Эксплойта нетEPSS 2 %coppermine · coppermine photo gallery2 мая 2004 г.
- CVE-2006-087221Наблюдать
Directory traversal vulnerability in init.inc.php in Coppermine Photo Gallery 1.4.3 and earlier allows remote attackers to include arbitrary
СредняяCVSS 5,0Эксплойта нетEPSS 2 %coppermine · coppermine photo gallery24 февр. 2006 г.