Описание
SQL injection vulnerability in thumbnails.php in Coppermine Photo Gallery (CPG) 1.3.x allows remote authenticated users to execute arbitrary SQL commands via a cpg131_fav cookie. NOTE: it was later reported that 1.4.10, 1.4.14, and other 1.4.x versions are also affected using similar cookies.
SQL injection vulnerability in thumbnails.php in Coppermine Photo Gallery (CPG) 1.3.x allows remote authenticated users to execute arbitrary SQL commands via a cpg131_fav cookie. NOTE: it was later reported that 1.4.10, 1.4.14, and other 1.4.x versions are also affected using similar cookies.
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2007-1107
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32688
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39806
- https://www.exploit-db.com/exploits/3371
- https://www.exploit-db.com/exploits/4950
- https://www.exploit-db.com/exploits/4961
- http://osvdb.org/33133
- http://securityreason.com/securityalert/2297
- http://www.securityfocus.com/archive/1/461158/100/0/threaded
- http://www.securityfocus.com/bid/22709
- http://www.securityfocus.com/bid/27372
EPSS
CVE ID
Связанные уязвимости
SQL injection vulnerability in thumbnails.php in Coppermine Photo Gallery (CPG) 1.3.x allows remote authenticated users to execute arbitrary SQL commands via a cpg131_fav cookie. NOTE: it was later reported that 1.4.10, 1.4.14, and other 1.4.x versions are also affected using similar cookies.
EPSS