CVE-2007-5888 - Cross-site scripting (XSS) vulnerability in displayecard.php in Coppermine Photo Gallery (CPG) before 1.4.14 allows remote attackers to inject arbitrary web script or HTML via the data parameter

Back Back to CVE browser

MEDIUM

Cross-site scripting (XSS) vulnerability in displayecard.php in Coppermine Photo Gallery (CPG) before 1.4.14 allows remote attackers to inject arbitrary web script or HTML via the data parameter

Published Nov 7, 2007

4.3

MEDIUM

CVSS 2.0

EPSS 1.06%

Description

Cross-site scripting (XSS) vulnerability in displayecard.php in Coppermine Photo Gallery (CPG) before 1.4.14 allows remote attackers to inject arbitrary web script or HTML via the data parameter.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (6)

http://coppermine-gallery.net/forum/index.php?topic=48106.0
x_refsource_CONFIRMPatch
http://osvdb.org/38420
vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/27534
third-party-advisoryx_refsource_SECUNIAPatchVendor Advisory
http://www.securityfocus.com/bid/26357
vdb-entryx_refsource_BID
https://euvd.enisa.europa.eu/vulnerability/EUVD-2007-5858
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/38290
vdb-entryx_refsource_XF

Link	Providers	Tags
http://coppermine-gallery.net/forum/index.php?topic=48106.0		x_refsource_CONFIRMPatch
http://osvdb.org/38420		vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/27534		third-party-advisoryx_refsource_SECUNIAPatchVendor Advisory
http://www.securityfocus.com/bid/26357		vdb-entryx_refsource_BID
https://euvd.enisa.europa.eu/vulnerability/EUVD-2007-5858		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/38290		vdb-entryx_refsource_XF