Bugtraq mailing list archives

[KAPDA::48]CopperminePhotoGallery1.4.8~ addhit() function~ SQLinjection attack

From: addmimistrator () gmail com
Date: 11 Jun 2006 15:32:39 -0000

[ORIGINAL ADVISORY:]
http://myimei.com/security/2006-06-11/copperminephotogallery148-addhit-function-sqlinjection-attack.html
HTTP://KAPDA.IR


-Summary-
Software: CPG Coppermine Photo Gallery
Softwares Web Site: http://coppermine.sourceforge.net/
Versions: 1.4.8.stable
Class: Remote
Status: Unpatched
Exploit: Available
Solution: Available
Discovered by: imei addmimistrator
Risk Level: Mediume-High
-Description-
There is a security flaw in Coppermine Photo Gallery, one of popular photo galleries in internet, that allows attacker 
perform an SQL INJECTION attack .

VISIT ORIGINAL ADVISORY FOR MORE DETAILES

Current thread:

[KAPDA::48]CopperminePhotoGallery1.4.8~ addhit() function~ SQLinjection attack addmimistrator (Jun 12)