Users login

Create an account »

JOIN XATRIX

Users login

Home » Hacking News » Coppermine Photo Gallery SQL injection vulnerability

Coppermine Photo Gallery SQL injection vulnerability

by Mario Miri on May 16th, 2003 Coppermine Photo Gallery is prone to SQL injection attacks in displayimage.php script due to invalid input data sanitization.


Vulnerable:
Coppermine Photo Gallery 1.0 RC3
Coppermine Photo Gallery 1.1 beta 2
Coppermine Photo Gallery 1.1 .0


Solution:
Currently there are no known patches.

Discovered by:
Alumni Alumni, [email protected]


Newsletter signup

Signup to our monthly newsletter and stay in touch with IT news!

Free E-books

We've got ebooks! But they're not online. :( Please give us a few days to bring downloads back.

Contact

Have something to say or just wanna drop us a line? Please keep this in mind: to spam, we reply with spam.

Contact us »