Coppermine Photo Gallery *bridge/coppermine.inc.php* SQL Injection

Posted on Monday, April 14, 2008 @ 14:48:05 PDT in Security
by Raven

SECUNIA ADVISORY ID: SA29741

VERIFY ADVISORY: http://secunia.com/advisories/29741/

CRITICAL: Moderately critical

IMPACT: Manipulation of data

SOFTWARE: Coppermine Photo Gallery 1.x http://secunia.com/product/1427/

DESCRIPTION: A vulnerability has been reported in Coppermine Photo Gallery, which can be exploited by malicious people to conduct SQL injection attacks. The vulnerability is reported in version 1.4.17. Prior versions may also be affected.

Input passed to unspecified cookies in bridge/coppermine.inc.php is not properly sanitized before being used in SQL queries. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code.

SOLUTION: Update to version 1.4.18.

PROVIDED AND/OR DISCOVERED BY: Reported by the vendor.

ORIGINAL ADVISORY: http://forum.coppermine-gallery.net/index.php/topic,51882.0.html
 
 
click Related        click Share
 
News ©

Site Info v2.2.2

Last SeenLast Seen
Server TrafficServer Traffic
  • Total: 369,933,295
  • Today: 65,103
Server InfoServer Info
  • Oct 22, 2018
  • 06:32 pm PDT
 
 

Daily Inspiration