CVEvulnerability
CVE-2014-4612
6.1 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2018-03-16
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 6.1 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in the keywords manager (keywordmgr.php) in Coppermine Photo Gallery before 1.5.27 and 1.6.x before 1.6.01 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected configurations
• coppermine-gallery coppermine photo gallery (< 1.5.28)
• coppermine-gallery coppermine photo gallery (>= 1.6.0 < 1.6.01)
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://forum.coppermine-gallery.net/index.php/topic%2C77376.0.html forum.coppermine-gallery.net
- http://seclists.org/oss-sec/2014/q2/608 Mailing List, Patch, Third Party Advisory
- http://seclists.org/oss-sec/2014/q2/620 Mailing List, Third Party Advisory
- http://sourceforge.net/p/coppermine/code/8674 Patch
- http://www.securityfocus.com/bid/68140 Third Party Advisory, VDB Entry
- https://sourceforge.net/p/coppermine/code/8674/tree//trunk/cpg1.5.x/CHANGELOG.txt Release Notes
- https://sourceforge.net/p/coppermine/code/8674/tree//trunk/cpg1.6.x/CHANGELOG.txt Release Notes
- http://forum.coppermine-gallery.net/index.php/topic%2C77376.0.html forum.coppermine-gallery.net
- http://seclists.org/oss-sec/2014/q2/608 Mailing List, Patch, Third Party Advisory
- http://seclists.org/oss-sec/2014/q2/620 Mailing List, Third Party Advisory
- http://sourceforge.net/p/coppermine/code/8674 Patch
- http://www.securityfocus.com/bid/68140 Third Party Advisory, VDB Entry
- https://sourceforge.net/p/coppermine/code/8674/tree//trunk/cpg1.5.x/CHANGELOG.txt Release Notes
- https://sourceforge.net/p/coppermine/code/8674/tree//trunk/cpg1.6.x/CHANGELOG.txt Release Notes