CVE-2007-4977

Cross-site scripting (XSS) vulnerability in mode.php in Coppermine Photo Gallery (CPG) 1.4.12 and earlier allows remote attackers to inject arbitrary web script or HTML via the referer parameter.

Link	Resource
http://coppermine-gallery.net/forum/index.php?topic=46847.0	Patch
http://www.securityfocus.com/bid/25698	Exploit Patch
http://secunia.com/advisories/26843	Patch
http://www.securitytracker.com/id?1018704
http://securityreason.com/securityalert/3152
http://osvdb.org/37100
http://www.vupen.com/english/advisories/2007/3194
https://exchange.xforce.ibmcloud.com/vulnerabilities/36659
http://www.securityfocus.com/archive/1/479757/100/0/threaded

Configuration 1

cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4.11:*:*:*:*:*:*:* cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4.12:*:*:*:*:*:*:* cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4:*:*:*:*:*:*:* cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4.2:*:*:*:*:*:*:* cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4.9:*:*:*:*:*:*:* cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4.4:*:*:*:*:*:*:* cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4.10:*:*:*:*:*:*:*

---

Published : 2007-09-19 06:17

Updated : 2018-10-15 09:39

---

NVD link : CVE-2007-4977

Mitre link : CVE-2007-4977

No products.

CWE-79