PT-2019-9026 · Coppermine · Coppermine Photo Gallery

Publicado 2019-05-07 · Atualizado 2019-05-07 · CVE-2018-14478

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Coppermine Photo Gallery version 1.5.46

Description The issue concerns an XSS vulnerability in the ecard.php file. It can be exploited via the sender name, recipient email, greetings, or recipient name parameters.

Recommendations For Coppermine Photo Gallery version 1.5.46, update to a newer version that contains a fix for this issue.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2018-14478

Produtos afetados

Coppermine Photo Gallery

Referências · 4

• 🔥 http://packetstormsecurity.com/files/151306/Coppermine-1.5.46-Cross-Site-Scripting.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-14478 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-14478 · Aviso do Fabricante
• http://forum.coppermine-gallery.net/index.php/board%2C58.0.html · Nota