Vulnerability Report

CVE-2007-0122

Title: Coppermine Coppermine Photo Gallery Injection (SQLi/OSi)

SQLi

Proof Of Concept

PoC Available for CVE-2007-0122

CWE Category NVD-CWE-noinfo
Published Date Jan 09, 2007
Modified Date Jun 16, 2026
Exploit Status Available
Score 6.5 CVSS v2.0
Exploit Probability (EPSS)
3.02%

Vulnerability Summary

CVE-2007-0122: Multiple SQL injection vulnerabilities in Coppermine Photo Gallery 1.4.10 and earlier allow remote authenticated administrators to execute arbitrary SQL commands via (1) the cat parameter to albmgr.php, and possibly (2) the gid parameter to usermgr.php; (3) the start parameter to db_ecard.php; and the albumid parameter to unspecified files, related to the (4) filename_to_title and (5) del_titles functions.

Impacted Vendors

C
coppermine 1
C
coppermine-gallery 1

Reference Links

http://acid-root.new.fr/poc/19070104.txt http://osvdb.org/35852 http://osvdb.org/35853 http://osvdb.org/35854 http://osvdb.org/35855 http://osvdb.org/35856 http://secunia.com/advisories/25846 http://securityreason.com/securityalert/2123 http://www.securityfocus.com/archive/1/456051/100/0/threaded http://www.securityfocus.com/bid/21894 https://www.exploit-db.com/exploits/3085 http://acid-root.new.fr/poc/19070104.txt http://osvdb.org/35852 http://osvdb.org/35853 http://osvdb.org/35854 http://osvdb.org/35855 http://osvdb.org/35856 http://secunia.com/advisories/25846 http://securityreason.com/securityalert/2123 http://www.securityfocus.com/archive/1/456051/100/0/threaded http://www.securityfocus.com/bid/21894 https://www.exploit-db.com/exploits/3085
CVSS v2.0
Source Entity [email protected]
Severity MEDIUM
6.5
Access Vector
N/A
Authentication
N/A
RAW VECTOR AV:N/AC:L/Au:S/C:P/I:P/A:P

Associated Attack Patterns (CAPEC)

Total: Patterns

CVE-2007-0122 Exploits & PoCs (Proof Of Concept)

Exploit-DB https://www.exploit-db.com/exploits/29397
View Code
MODIFIED

Vulnerability data updated via NVD.

MODIFIED

Vulnerability data updated via NVD.

MODIFIED

Vulnerability data or affected products updated.

PUBLISHED

Vulnerability first announced in NVD.

Attack Vector Matrix

Access Vector N/A
Complexity N/A
Privileges N/A
Interaction NONE
CVSS Vector String AV:N/AC:L/Au:S/C:P/I:P/A:P

Affected Stack

No specific products linked.