Approved changes feed: RSS · Atom

cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4.3:*:*:*:*:*:*:*

part: a version: 1.4.3 update: *

VendorCoppermine (536528ae-2780-5e69-93a2-139664267c71)
ProductCoppermine Photo Gallery (7aca4e20-74c9-5c88-a10c-c70ada9285d7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/00000vish/coppermine-gallery purl2cpe 2026-06-01 10:12:45.957014

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-1840 vulnerable 2026-06-08 04:50:22.070078 Details available
SQL injection vulnerability in upload.php in Coppermine Photo Gallery (CPG) 1.4.16 and earlier allows remote authenticated users or user-assisted remote HTTP servers to execute arbitrary SQL commands via the Content-Type HTTP response header provided by the HTTP server that is used for an upload.
Published: 2008-04-16T17:00:00.000Z
Updated: 2024-08-07T08:40:59.516Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-2976 vulnerable 2026-06-08 04:49:07.982658 Details available
Unspecified vulnerability in usermgr.php in Coppermine Photo Gallery before 1.4.7 has unknown impact and remote attack vectors, possibly related to authorization/authentication errors.
Published: 2006-06-12T22:00:00.000Z
Updated: 2024-08-07T18:06:27.224Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-2514 vulnerable 2026-06-08 04:49:06.966613 Details available
Coppermine galleries before 1.4.6, when running on Apache with mod_mime installed, allows remote attackers to upload arbitrary files via a filename with multiple file extensions.
Published: 2006-05-22T22:00:00.000Z
Updated: 2024-08-07T17:51:04.774Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-0873 vulnerable 2026-06-08 04:48:55.598860 Details available
Absolute path traversal vulnerability in docs/showdocs.php in Coppermine Photo Gallery 1.4.3 and earlier allows remote attackers to include arbitrary files via the f parameter, and possibly remote files using UNC share pathnames.
Published: 2006-02-24T11:00:00.000Z
Updated: 2024-08-07T16:48:56.623Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-0872 vulnerable 2026-06-08 04:48:55.598452 Details available
Directory traversal vulnerability in init.inc.php in Coppermine Photo Gallery 1.4.3 and earlier allows remote attackers to include arbitrary files via a .. (dot dot) sequence and trailing NULL (%00) byte in the lang parameter.
Published: 2006-02-24T11:00:00.000Z
Updated: 2024-08-07T16:48:56.611Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.