Description
Multiple SQL injection vulnerabilities in Coppermine Photo Gallery (CPG) before 1.4.15 allow remote authenticated administrators to execute arbitrary SQL commands via the (1) albumid, (2) startpic, and (3) numpics parameters to util.php; and (4) cid_array parameter to reviewcom.php.
Remediation
References
Related Vulnerabilities
WebLogic Missing Authentication for Critical Function Vulnerability (CVE-2026-35301)
WordPress Plugin Booster for WooCommerce Security Bypass (5.4.3)
phpMyAdmin Improper Input Validation Vulnerability (CVE-2006-6943)
WordPress Plugin Photo Gallery, Images, Slider in Rbs Image Gallery Security Bypass (2.0.15)