Coppermine Photo Gallery
Approved changes feed: RSS · Atom
cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Coppermine Gallery (d3f32ef3-2292-5531-8749-8d32c3297b62) |
|---|---|
| Product | Coppermine Photo Gallery (d18056e1-8a21-5ab2-8fa5-da41e075b32f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/coppermine-gallery/cpg1.6.x |
purl2cpe | 2026-06-01 10:18:01.520875 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2015-3923 |
vulnerable | 2026-06-08 05:06:38.853087 |
Details available
Coppermine Photo Gallery before 1.5.36 allows remote attackers to enumerate directories via a full path in the folder parameter to minibrowser.php.
Published: 2015-06-10T18:00:00.000Z
Updated: 2024-08-06T05:56:16.318Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-3922 |
vulnerable | 2026-06-08 05:06:38.852783 |
Details available
Open redirect vulnerability in mode.php in Coppermine Photo Gallery before 1.5.36 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the referer parameter.
Published: 2015-05-27T18:00:00.000Z
Updated: 2024-08-06T05:56:16.063Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-3921 |
vulnerable | 2026-06-08 05:06:38.852392 |
Details available
Cross-site scripting (XSS) vulnerability in contact.php in Coppermine Photo Gallery before 1.5.36 allows remote authenticated users to inject arbitrary web script or HTML via the referer parameter.
Published: 2015-05-27T18:00:00.000Z
Updated: 2024-08-06T05:56:16.314Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-4612 |
vulnerable | 2026-06-08 05:05:45.173539 |
Details available
Cross-site scripting (XSS) vulnerability in the keywords manager (keywordmgr.php) in Coppermine Photo Gallery before 1.5.27 and 1.6.x before 1.6.01 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published: 2018-03-16T17:00:00.000Z
Updated: 2024-08-06T11:20:26.662Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-1614 |
vulnerable | 2026-06-08 05:00:49.897590 |
Details available
Coppermine Photo Gallery before 1.5.20 allows remote attackers to obtain sensitive information via (1) a direct request to plugins/visiblehookpoints/index.php, an invalid (2) page or (3) cat parameter to thumbnails.php, an invalid (4) page parameter to usermgr.php, or an invalid (5) newer_than or (6) older_than parameter to search.inc.php, which reveals the installation path in an error message.
Published: 2012-09-04T20:00:00.000Z
Updated: 2024-09-17T00:20:42.627Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-1613 |
vulnerable | 2026-06-08 05:00:49.856768 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-2476 |
vulnerable | 2026-06-08 04:58:07.160245 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-4693 |
vulnerable | 2026-06-08 04:56:30.207911 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-4667 |
vulnerable | 2026-06-08 04:56:30.023893 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-3486 |
vulnerable | 2026-06-08 04:50:34.867576 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-3481 |
vulnerable | 2026-06-08 04:50:34.841184 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-0504 |
vulnerable | 2026-06-08 04:50:16.934755 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.