CVE - CVE-2007-0122

CVE-ID
CVE-2007-0122	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
Multiple SQL injection vulnerabilities in Coppermine Photo Gallery 1.4.10 and earlier allow remote authenticated administrators to execute arbitrary SQL commands via (1) the cat parameter to albmgr.php, and possibly (2) the gid parameter to usermgr.php; (3) the start parameter to db_ecard.php; and the albumid parameter to unspecified files, related to the (4) filename_to_title and (5) del_titles functions.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
BID:21894 URL:http://www.securityfocus.com/bid/21894 BUGTRAQ:20070105 Coppermine Photo Gallery <= 1.4.10 SQL Injection Exploit URL:http://www.securityfocus.com/archive/1/456051/100/0/threaded EXPLOIT-DB:3085 URL:https://www.exploit-db.com/exploits/3085 MISC:http://acid-root.new.fr/poc/19070104.txt OSVDB:35852 URL:~~http://osvdb.org/35852~~ (Obsolete source) OSVDB:35853 URL:~~http://osvdb.org/35853~~ (Obsolete source) OSVDB:35854 URL:~~http://osvdb.org/35854~~ (Obsolete source) OSVDB:35855 URL:~~http://osvdb.org/35855~~ (Obsolete source) OSVDB:35856 URL:~~http://osvdb.org/35856~~ (Obsolete source) SECUNIA:25846 URL:http://secunia.com/advisories/25846 SREASON:2123 URL:http://securityreason.com/securityalert/2123
Assigning CNA
MITRE Corporation
Date Record Created
20070108	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20070108)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)