CVE-2004-1985: coppermine coppermine_photo_gallery

EPSS trend

Probability

3.91%

Chance of exploitation in the next 30 days

Percentile

90%

Versus all other CVEs

30-day change

No change 0.00 pp

From 3.91% on 22-09-2026

22-09-202622-10-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

2 found

referenceUnverified
Exploit Reference (securityfocus.com)
Maturity: unknown
exploit-databasephpVerified
Coppermine Photo Gallery 1.2.2b - 'menu.inc.php' Cross-Site Scripting
Maturity: poc

References

6 links

marc.info?l=bugtraq&m=108360247732014&w=2Mailing ListX Refsource BUGTRAQ
www.waraxe.us/index.php?modname=sa&id=26X Refsource MISC
exchange.xforce.ibmcloud.com/vulnerabilities/16040VDB EntryX Refsource XF
www.osvdb.org/5757VDB EntryX Refsource OSVDB
www.securityfocus.com/bid/10253VDB EntryX Refsource BIDExploitVendor Advisory
secunia.com/advisories/11524Third Party AdvisoryX Refsource SECUNIAVendor Advisory

Related vulnerabilities

HighCVE-2003-1210francisco_burzi · php-nuke21y agofrancisco_burzi php-nukeMultiple SQL injection vulnerabilities in the Downloads module for PHP-Nuke 5.x through 6.5 allow remote attackers to execute arbitrary SQL commands via the (1) lid parameter to the getit function or the (2) min parameter to the search function.EPSS5.37%MediumCVE-2003-0318francisco_burzi · php-nuke23y agofrancisco_burzi php-nukeCross-site scripting (XSS) vulnerability in the Statistics module for PHP-Nuke 6.0 and earlier allows remote attackers to insert arbitrary web script via the year parameter.EPSS1.04%HighCVE-2007-1107coppermine · coppermine_photo_gallery19y agocoppermine coppermine_photo_gallerySQL injection vulnerability in thumbnails.php in Coppermine Photo Gallery (CPG) 1.3.x allows remote authenticated users to execute arbitrary SQL commands via a cpg131_fav cookie. NOTE: it was later reported that 1.4.10, 1.4.14, and other 1.4.x versions are also affected using similar cookies.EPSS2.19%MediumCVE-2007-1061francisco_burzi · php-nuke19y agofrancisco_burzi php-nukeSQL injection vulnerability in index.php in Francisco Burzi PHP-Nuke 8.0 Final and earlier, when the "HTTP Referers" block is enabled, allows remote attackers to execute arbitrary SQL commands via the HTTP Referer header (HTTP_REFERER variable).EPSS61.76%MediumCVE-2007-0122coppermine · coppermine_photo_gallery19y agocoppermine coppermine_photo_galleryMultiple SQL injection vulnerabilities in Coppermine Photo Gallery 1.4.10 and earlier allow remote authenticated administrators to execute arbitrary SQL commands via (1) the cat parameter to albmgr.php, and possibly (2) the gid parameter to usermgr.php; (3) the start parameter to db_ecard.php; and the albumid parameter to unspecified files, related to the (4) filename_to_title and (5) del_titles functions.EPSS3.20%MediumCVE-2007-0835coppermine · coppermine_photo_gallery19y agocoppermine coppermine_photo_galleryadmin.php in Coppermine Photo Gallery 1.4.10, and possibly earlier, allows remote authenticated users to execute arbitrary shell commands via shell metacharacters (";" semicolon) in the "Command line options for ImageMagick" form field, when used as an option to ImageMagick's convert command. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.EPSS1.46%

All vulnerabilities incoppermine_photo_gallery php-nuke

CVE-2004-1985: coppermine coppermine_photo_gallery

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References