Description

Multiple SQL injection vulnerabilities in Coppermine Photo Gallery (CPG) before 1.4.15 allow remote authenticated administrators to execute arbitrary SQL commands via the (1) albumid, (2) startpic, and (3) numpics parameters to util.php; and (4) cid_array parameter to reviewcom.php.

Remediation

References

CVE-2008-0504

Related Vulnerabilities

WordPress Plugin Coming Soon & Maintenance Mode Page Unspecified Vulnerability (1.40)

Jenkins Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2018-1000997)

OpenSSL Resource Management Errors Vulnerability (CVE-2008-1678)

WordPress Plugin All-In-One Security (AIOS)-Security and Firewall Cross-Site Scripting (4.4.5)

Liferay Portal CVE-2020-13444 Vulnerability (CVE-2020-13444)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-138 CVE-2008-0504