CVE-2008-1840

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2008-1840
SQL injection vulnerability in upload.php in Coppermine Photo Gallery (CPG) 1.4.16 and earlier allows remote authenticated users or user-assisted remote HTTP servers to execute arbitrary SQL commands via the Content-Type HTTP response header provided by the HTTP server that is used for an upload.

6.5 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:L/Au:S/C:P/I:P/A:P

Exploitability : 8.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References
Link Resource
http://forum.coppermine-gallery.net/index.php/topic%2C51787%2C0.html
http://secunia.com/advisories/29795 Vendor Advisory
http://sourceforge.net/project/shownotes.php?group_id=89658&release_id=592069 Patch
http://www.osvdb.org/44345
http://www.securityfocus.com/bid/28766 Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/41784
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:coppermine:coppermine_photo_gallery:*:*:*:*:*:*:*:*
cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4:*:*:*:*:*:*:*
cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4.1:*:*:*:*:*:*:*
cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4.2:*:*:*:*:*:*:*
cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4.3:*:*:*:*:*:*:*
cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4.4:*:*:*:*:*:*:*
cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4.5:*:*:*:*:*:*:*
cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4.6:*:*:*:*:*:*:*
cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4.7:*:*:*:*:*:*:*
cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4.8:*:*:*:*:*:*:*
cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4.9:*:*:*:*:*:*:*
cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4.10:*:*:*:*:*:*:*
cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4.11:*:*:*:*:*:*:*
cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4.12:*:*:*:*:*:*:*
cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4.13:*:*:*:*:*:*:*
cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4.14:*:*:*:*:*:*:*
History

07 Nov 2023, 02:02

Type Values Removed Values Added
References
  • {'url': 'http://forum.coppermine-gallery.net/index.php/topic,51787,0.html', 'name': 'http://forum.coppermine-gallery.net/index.php/topic,51787,0.html', 'tags': ['Exploit'], 'refsource': 'CONFIRM'}
  • () http://forum.coppermine-gallery.net/index.php/topic%2C51787%2C0.html -
Information

Published : 2008-04-16 17:05

Updated : 2023-12-10 10:51

NVD link : CVE-2008-1840

Mitre link : CVE-2008-1840

CVE.ORG link : CVE-2008-1840

JSON object : View

Products Affected

coppermine

  • coppermine_photo_gallery
CWE
CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')