Vulnerabilities > CVE-2007-3558 - SQL Injection vulnerability in Coppermine Photo Gallery Album Password Cookie

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
coppermine
nessus
exploit available
NVD
Published: 2007-07-04
Updated: 2008-09-05

Summary

SQL injection vulnerability in Coppermine Photo Gallery (CPG) before 1.4.11 allows remote attackers to execute arbitrary SQL commands via an album password cookie to an unspecified component.

Vulnerable Configurations

Part Description Count
Application
Coppermine
1

Exploit-Db

descriptionCoppermine Photo Gallery <= 1.4.10 Remote SQL Injection Exploit. CVE-2007-3558. Webapps exploit for php platform
idEDB-ID:3085
last seen2016-01-31
modified2007-01-05
published2007-01-05
reporterDarkFig
sourcehttps://www.exploit-db.com/download/3085/
titleCoppermine Photo Gallery <= 1.4.10 - Remote SQL Injection Exploit

Nessus

NASL familyCGI abuses
NASL idCOPPERMINE_ALBPW_SQL_INJECTION.NASL
descriptionThe version of Coppermine installed on the remote host fails to sanitize user-supplied input to the album password cookie before using it in a database query in the
last seen2020-06-01
modified2020-06-02
plugin id31137
published2008-02-25
reporterThis script is Copyright (C) 2008-2018 Tenable Network Security, Inc.
sourcehttps://www.tenable.com/plugins/nessus/31137
titleCoppermine Photo Gallery album Password Cookie SQL Injection

References