SQL Injection Vulnerability in Coppermine Photo Gallery by Coppermine Team
CVE-2008-1841
Currently unrated
What is CVE-2008-1841?
A SQL injection flaw exists in the session management component of Coppermine Photo Gallery (CPG) 1.4.17 and earlier. This vulnerability allows attackers to manipulate SQL queries through the session_id input parameter, potentially resulting in unauthorized access to sensitive data. Attackers capitalized on this flaw, exploiting it in the wild as early as April 2008. Notably, previous attempts to patch related issues in CVE-2008-1840 did not effectively resolve this specific vulnerability.