CVE-2014-4612

Опубликовано: 16 мар. 2018

Источник: nvd

CVSS3: 6.1

CVSS2: 4.3

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in the keywords manager (keywordmgr.php) in Coppermine Photo Gallery before 1.5.27 and 1.6.x before 1.6.01 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Ссылки

http://forum.coppermine-gallery.net/index.php/topic%2C77376.0.html
http://seclists.org/oss-sec/2014/q2/608
Mailing List
Patch
Third Party Advisory
http://seclists.org/oss-sec/2014/q2/620
Mailing List
Third Party Advisory
http://sourceforge.net/p/coppermine/code/8674
Patch
http://www.securityfocus.com/bid/68140
Third Party Advisory
VDB Entry
https://sourceforge.net/p/coppermine/code/8674/tree//trunk/cpg1.5.x/CHANGELOG.txt
Release Notes
https://sourceforge.net/p/coppermine/code/8674/tree//trunk/cpg1.6.x/CHANGELOG.txt
Release Notes
http://forum.coppermine-gallery.net/index.php/topic%2C77376.0.html
http://seclists.org/oss-sec/2014/q2/608
Mailing List
Patch
Third Party Advisory
http://seclists.org/oss-sec/2014/q2/620
Mailing List
Third Party Advisory
http://sourceforge.net/p/coppermine/code/8674
Patch
http://www.securityfocus.com/bid/68140
Third Party Advisory
VDB Entry
https://sourceforge.net/p/coppermine/code/8674/tree//trunk/cpg1.5.x/CHANGELOG.txt
Release Notes
https://sourceforge.net/p/coppermine/code/8674/tree//trunk/cpg1.6.x/CHANGELOG.txt
Release Notes

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:*:*:*:*:*:*:*:*

Версия до 1.5.28 (исключая)

cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:*:*:*:*:*:*:*:*

Версия от 1.6.0 (включая) до 1.6.01 (исключая)

EPSS

Процентиль: 67%

0.0054

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-6xcq-26xx-frcf