Coppermine Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-1613)

Description

Cross-site scripting (XSS) vulnerability in edit_one_pic.php in Coppermine Photo Gallery before 1.5.20 allows remote authenticated users with certain privileges to inject arbitrary web script or HTML via the keywords parameter.

Remediation

References

CVE-2012-1613

Related Vulnerabilities

MySQL CVE-2017-3460 Vulnerability (CVE-2017-3460)

Oracle Database Server Create Session privilege issue (CVE-2021-1993)

Oracle Database Server CVE-2015-0455 Vulnerability (CVE-2015-0455)

Atlassian Jira Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-5232)

PHP Permissions, Privileges, and Access Controls Vulnerability (CVE-2011-2202)

Severity

Low

Classification

CVE-2012-1613 CWE-707