4.3
CVE-2005-2676
- EPSS 1.18%
- Veröffentlicht 23.08.2005 04:00:00
- Zuletzt bearbeitet 16.06.2026 22:15:27
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginCross-site scripting (XSS) vulnerability in displayimage.php in Coppermine Photo Gallery before 1.3.4 allows remote attackers to inject arbitrary web script or HTML via EXIF data.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Coppermine ≫ Coppermine Photo Gallery Version1.0_rc3
Coppermine ≫ Coppermine Photo Gallery Version1.1_.0
Coppermine ≫ Coppermine Photo Gallery Version1.1_beta_2
Coppermine ≫ Coppermine Photo Gallery Version1.2
Coppermine ≫ Coppermine Photo Gallery Version1.2.1
Coppermine ≫ Coppermine Photo Gallery Version1.2.2_b
Coppermine ≫ Coppermine Photo Gallery Version1.3
Coppermine ≫ Coppermine Photo Gallery Version1.3.2
Coppermine ≫ Coppermine Photo Gallery Version1.3.3
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.18% | 0.635 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 4.3 | 8.6 | 2.9 |
AV:N/AC:M/Au:N/C:N/I:P/A:N
|
http://coppermine-gallery.net/forum/index.php?topic=20933.0
http://secunia.com/advisories/16499
http://securitytracker.com/id?1014799
http://www.securityfocus.com/bid/14625