PT-2026-83530 · Unknown · Coppermine Photo Gallery
CVSS v2.0
4.0
Medium
| Vector | AV:N/AC:L/Au:S/C:N/I:P/A:N |
Name of the Vulnerable Software and Affected Versions
Coppermine Photo Gallery versions prior to 1.6.29
Description
A remote cross site scripting issue exists within the Hidden Album Update Endpoint in the
db input.php file. Cross site scripting is a technique where malicious scripts are injected into trusted websites, which are then executed in the browser of the user.Recommendations
Upgrade to version 1.6.29.
Exploit
Fix
Code Injection
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Coppermine Photo Gallery