Cross-Site Scripting Vulnerability in Coppermine Photo Gallery by Coppermine Team
CVE-2010-4667

Currently unrated

Key Information:

Vendor

Coppermine-gallery

Status
Coppermine Photo Gallery
Vendor
CVE Published:
14 June 2011

What is CVE-2010-4667?

An XSS vulnerability exists in Coppermine Photo Gallery prior to version 1.4.27, allowing remote attackers to inject arbitrary web scripts or HTML by exploiting unspecified vectors. This may lead to unauthorized access, data theft, or session hijacking, raising serious security concerns for users and administrators.

References

http://www.openwall.com/lists/oss-security/2011/06/08/2
mailing-listx_refsource_MLIST
http://www.openwall.com/lists/oss-security/2011/06/08/6
mailing-listx_refsource_MLIST
http://bugs.gentoo.org/show_bug.cgi?id=347287
x_refsource_CONFIRM

Timeline

  • Vulnerability Reserved

  • Vulnerability published

JSON
.
CVE-2010-4667 : Cross-Site Scripting Vulnerability in Coppermine Photo Gallery by Coppermine Team