CVE-2007-1107: coppermine coppermine_photo_gallery

EPSS trend

Probability

2.19%

Chance of exploitation in the next 30 days

Percentile

82%

Versus all other CVEs

30-day change

Increase +0.07 pp

From 2.13% on 22-09-2026

22-09-202622-10-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

3 found

exploit-databasephpVerified
Coppermine Photo Gallery 1.4.10 - 'cpg1410_xek.php' SQL Injection
Maturity: poc
exploit-databasephpVerified
Coppermine Photo Gallery 1.4.10 - SQL Injection
Maturity: poc
exploit-databasephpVerified
Coppermine Photo Gallery 1.3.x - Blind SQL Injection
Maturity: poc

References

10 links

www.securityfocus.com/archive/1/461158/100/0/threadedMailing ListX Refsource BUGTRAQ
exchange.xforce.ibmcloud.com/vulnerabilities/32688VDB EntryX Refsource XF
securityreason.com/securityalert/2297Third Party AdvisoryX Refsource SREASON
www.securityfocus.com/bid/22709VDB EntryX Refsource BID
exchange.xforce.ibmcloud.com/vulnerabilities/39806VDB EntryX Refsource XF
www.exploit-db.com/exploits/3371ExploitX Refsource EXPLOIT DB
www.exploit-db.com/exploits/4950ExploitX Refsource EXPLOIT DB
www.securityfocus.com/bid/27372VDB EntryX Refsource BID
www.exploit-db.com/exploits/4961ExploitX Refsource EXPLOIT DB
osvdb.org/33133VDB EntryX Refsource OSVDB

Related vulnerabilities

MediumCVE-2007-0122coppermine · coppermine_photo_gallery19y agocoppermine coppermine_photo_galleryMultiple SQL injection vulnerabilities in Coppermine Photo Gallery 1.4.10 and earlier allow remote authenticated administrators to execute arbitrary SQL commands via (1) the cat parameter to albmgr.php, and possibly (2) the gid parameter to usermgr.php; (3) the start parameter to db_ecard.php; and the albumid parameter to unspecified files, related to the (4) filename_to_title and (5) del_titles functions.EPSS3.20%MediumCVE-2007-0835coppermine · coppermine_photo_gallery19y agocoppermine coppermine_photo_galleryadmin.php in Coppermine Photo Gallery 1.4.10, and possibly earlier, allows remote authenticated users to execute arbitrary shell commands via shell metacharacters (";" semicolon) in the "Command line options for ImageMagick" form field, when used as an option to ImageMagick's convert command. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.EPSS1.46%MediumCVE-2007-0115coppermine · coppermine_photo_gallery19y agocoppermine coppermine_photo_galleryStatic code injection vulnerability in Coppermine Photo Gallery 1.4.10 and earlier allows remote authenticated administrators to execute arbitrary PHP code via the Username to login.php, which is injected into an error message in security.log.php, which can then be accessed using viewlog.php.EPSS1.15%MediumCVE-2007-0836coppermine · coppermine_photo_gallery19y agocoppermine coppermine_photo_galleryadmin.php in Coppermine Photo Gallery 1.4.10, and possibly earlier, allows remote authenticated users to include arbitrary local and possibly remote files via the (1) "Path to custom header include" and (2) "Path to custom footer include" form fields. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.EPSS1.84%HighCVE-2007-4283coppermine · coppermine_photo_gallery19y agocoppermine coppermine_photo_galleryPHP remote file inclusion vulnerability in bridge/yabbse.inc.php in Coppermine Photo Gallery (CPG) 1.3.1 allows remote attackers to execute arbitrary PHP code via a URL in the sourcedir parameter.EPSS3.37%MediumCVE-2007-4976coppermine · coppermine_photo_gallery19y agocoppermine coppermine_photo_galleryDirectory traversal vulnerability in viewlog.php in Coppermine Photo Gallery (CPG) 1.4.12 and earlier allows remote authenticated administrators to include and execute arbitrary local files via a .. (dot dot) in the log parameter.EPSS8.52%

All vulnerabilities incoppermine_photo_gallery

CVE-2007-1107: coppermine coppermine_photo_gallery

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References