7.5
CVE-2007-3558
- EPSS 1.02%
- Veröffentlicht 04.07.2007 16:30:00
- Zuletzt bearbeitet 16.06.2026 22:42:16
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginSQL injection vulnerability in Coppermine Photo Gallery (CPG) before 1.4.11 allows remote attackers to execute arbitrary SQL commands via an album password cookie to an unspecified component.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Coppermine ≫ Coppermine Photo Gallery Version <= 1.4.10
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.02% | 0.588 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
http://secunia.com/advisories/25846
http://coppermine-gallery.net/forum/index.php?topic=44845.0
http://www.securityfocus.com/bid/24710