CVE-2012-1613 - NVD | ByteOS Network

NVD Vulnerability Details :

CVE-2012-1613

Modified

More Info Official Page

Source-secalert@redhat.com

Published At-04 Sep, 2012 | 20:55

Updated At-29 Apr, 2026 | 01:13

Cross-site scripting (XSS) vulnerability in edit_one_pic.php in Coppermine Photo Gallery before 1.5.20 allows remote authenticated users with certain privileges to inject arbitrary web script or HTML via the keywords parameter.

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	3.5	LOW	AV:N/AC:M/Au:S/C:N/I:P/A:N

Type: Primary

Version: 2.0

Base score: 3.5

Base severity: LOW

Vector:

AV:N/AC:M/Au:S/C:N/I:P/A:N

CPE Matches

coppermine-gallery>>coppermine_photo_gallery>>Versions up to 1.5.18(inclusive)

cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:*:*:*:*:*:*:*:*

coppermine-gallery>>coppermine_photo_gallery>>1.0

cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.0:*:*:*:*:*:*:*

coppermine-gallery>>coppermine_photo_gallery>>1.0

cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.0:rc3:*:*:*:*:*:*

coppermine-gallery>>coppermine_photo_gallery>>1.1

cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.1:*:*:*:*:*:*:*

coppermine-gallery>>coppermine_photo_gallery>>1.1

cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.1:beta_2:*:*:*:*:*:*

coppermine-gallery>>coppermine_photo_gallery>>1.1.0

cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.1.0:*:*:*:*:*:*:*

coppermine-gallery>>coppermine_photo_gallery>>1.2

cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.2:*:*:*:*:*:*:*

coppermine-gallery>>coppermine_photo_gallery>>1.2.0

cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.2.0:*:*:*:*:*:*:*

coppermine-gallery>>coppermine_photo_gallery>>1.2.0

cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.2.0:rc2:*:*:*:*:*:*

coppermine-gallery>>coppermine_photo_gallery>>1.2.1

cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.2.1:*:*:*:*:*:*:*

coppermine-gallery>>coppermine_photo_gallery>>1.2.1

cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.2.1:b:*:*:*:*:*:*

coppermine-gallery>>coppermine_photo_gallery>>1.2.1

cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.2.1:b-nuke:*:*:*:*:*:*

coppermine-gallery>>coppermine_photo_gallery>>1.3.0

cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.3.0:*:*:*:*:*:*:*

coppermine-gallery>>coppermine_photo_gallery>>1.3.1

cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.3.1:*:*:*:*:*:*:*

coppermine-gallery>>coppermine_photo_gallery>>1.3.2

cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.3.2:*:*:*:*:*:*:*

coppermine-gallery>>coppermine_photo_gallery>>1.3.3

cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.3.3:*:*:*:*:*:*:*

coppermine-gallery>>coppermine_photo_gallery>>1.3.4

cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.3.4:*:*:*:*:*:*:*

coppermine-gallery>>coppermine_photo_gallery>>1.3.5

cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.3.5:*:*:*:*:*:*:*

coppermine-gallery>>coppermine_photo_gallery>>1.4.0

cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.0:*:*:*:*:*:*:*

coppermine-gallery>>coppermine_photo_gallery>>1.4.0

cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.0:alpha:*:*:*:*:*:*

coppermine-gallery>>coppermine_photo_gallery>>1.4.0

cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.0:beta:*:*:*:*:*:*

coppermine-gallery>>coppermine_photo_gallery>>1.4.1

cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.1:*:*:*:*:*:*:*

coppermine-gallery>>coppermine_photo_gallery>>1.4.1

cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.1:beta:*:*:*:*:*:*

coppermine-gallery>>coppermine_photo_gallery>>1.4.2

cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.2:*:*:*:*:*:*:*

coppermine-gallery>>coppermine_photo_gallery>>1.4.3

cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.3:*:*:*:*:*:*:*

coppermine-gallery>>coppermine_photo_gallery>>1.4.4

cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.4:*:*:*:*:*:*:*

coppermine-gallery>>coppermine_photo_gallery>>1.4.5

cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.5:*:*:*:*:*:*:*

coppermine-gallery>>coppermine_photo_gallery>>1.4.6

cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.6:*:*:*:*:*:*:*

coppermine-gallery>>coppermine_photo_gallery>>1.4.7

cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.7:*:*:*:*:*:*:*

coppermine-gallery>>coppermine_photo_gallery>>1.4.8

cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.8:*:*:*:*:*:*:*

coppermine-gallery>>coppermine_photo_gallery>>1.4.9

cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.9:*:*:*:*:*:*:*

coppermine-gallery>>coppermine_photo_gallery>>1.4.10

cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.10:*:*:*:*:*:*:*

coppermine-gallery>>coppermine_photo_gallery>>1.4.11

cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.11:*:*:*:*:*:*:*

coppermine-gallery>>coppermine_photo_gallery>>1.4.12

cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.12:*:*:*:*:*:*:*

coppermine-gallery>>coppermine_photo_gallery>>1.4.13

cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.13:*:*:*:*:*:*:*

coppermine-gallery>>coppermine_photo_gallery>>1.4.14

cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.14:*:*:*:*:*:*:*

coppermine-gallery>>coppermine_photo_gallery>>1.4.15

cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.15:*:*:*:*:*:*:*

coppermine-gallery>>coppermine_photo_gallery>>1.4.16

cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.16:*:*:*:*:*:*:*

coppermine-gallery>>coppermine_photo_gallery>>1.4.17

cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.17:*:*:*:*:*:*:*

coppermine-gallery>>coppermine_photo_gallery>>1.4.18

cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.18:*:*:*:*:*:*:*

coppermine-gallery>>coppermine_photo_gallery>>1.4.19

cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.19:*:*:*:*:*:*:*

coppermine-gallery>>coppermine_photo_gallery>>1.4.20

cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.20:*:*:*:*:*:*:*

coppermine-gallery>>coppermine_photo_gallery>>1.4.21

cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.21:*:*:*:*:*:*:*

coppermine-gallery>>coppermine_photo_gallery>>1.4.22

cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.22:*:*:*:*:*:*:*

coppermine-gallery>>coppermine_photo_gallery>>1.4.23

cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.23:*:*:*:*:*:*:*

coppermine-gallery>>coppermine_photo_gallery>>1.4.24

cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.24:*:*:*:*:*:*:*

coppermine-gallery>>coppermine_photo_gallery>>1.4.25

cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.25:*:*:*:*:*:*:*

coppermine-gallery>>coppermine_photo_gallery>>1.4.26

cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.26:*:*:*:*:*:*:*

coppermine-gallery>>coppermine_photo_gallery>>1.4.27

cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.27:*:*:*:*:*:*:*

coppermine-gallery>>coppermine_photo_gallery>>1.5.1

cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.5.1:alpha:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-79	Primary	nvd@nist.gov

CWE ID: CWE-79

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://archives.neohapsis.com/archives/bugtraq/2012-03/0167.html	secalert@redhat.com	Exploit
http://coppermine.svn.sourceforge.net/viewvc/coppermine/trunk/cpg1.6.x/edit_one_pic.php?r1=8348&r2=8354	secalert@redhat.com	Patch
http://forum.coppermine-gallery.net/index.php/topic%2C74682.0.html	secalert@redhat.com	N/A
http://osvdb.org/80731	secalert@redhat.com	N/A
http://packetstormsecurity.org/files/111369/Coppermine-1.5.18-Cross-Site-Scripting-Path-Disclosure.html	secalert@redhat.com	Exploit
http://secunia.com/advisories/48643	secalert@redhat.com	Vendor Advisory
http://www.exploit-db.com/exploits/18680	secalert@redhat.com	N/A
http://www.openwall.com/lists/oss-security/2012/03/30/5	secalert@redhat.com	Exploit
http://www.openwall.com/lists/oss-security/2012/03/30/6	secalert@redhat.com	N/A
http://www.openwall.com/lists/oss-security/2012/04/03/6	secalert@redhat.com	N/A
http://www.securityfocus.com/bid/52818	secalert@redhat.com	N/A
http://www.waraxe.us/advisory-81.html	secalert@redhat.com	Exploit
http://archives.neohapsis.com/archives/bugtraq/2012-03/0167.html	af854a3a-2127-422b-91ae-364da2661108	Exploit
http://coppermine.svn.sourceforge.net/viewvc/coppermine/trunk/cpg1.6.x/edit_one_pic.php?r1=8348&r2=8354	af854a3a-2127-422b-91ae-364da2661108	Patch
http://forum.coppermine-gallery.net/index.php/topic%2C74682.0.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://osvdb.org/80731	af854a3a-2127-422b-91ae-364da2661108	N/A
http://packetstormsecurity.org/files/111369/Coppermine-1.5.18-Cross-Site-Scripting-Path-Disclosure.html	af854a3a-2127-422b-91ae-364da2661108	Exploit
http://secunia.com/advisories/48643	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://www.exploit-db.com/exploits/18680	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.openwall.com/lists/oss-security/2012/03/30/5	af854a3a-2127-422b-91ae-364da2661108	Exploit
http://www.openwall.com/lists/oss-security/2012/03/30/6	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.openwall.com/lists/oss-security/2012/04/03/6	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securityfocus.com/bid/52818	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.waraxe.us/advisory-81.html	af854a3a-2127-422b-91ae-364da2661108	Exploit

Hyperlink: http://archives.neohapsis.com/archives/bugtraq/2012-03/0167.html

Source: secalert@redhat.com

Resource:

Exploit

Hyperlink: http://coppermine.svn.sourceforge.net/viewvc/coppermine/trunk/cpg1.6.x/edit_one_pic.php?r1=8348&r2=8354

Source: secalert@redhat.com

Resource:

Patch

Hyperlink: http://forum.coppermine-gallery.net/index.php/topic%2C74682.0.html

Source: secalert@redhat.com

Resource: N/A

Hyperlink: http://osvdb.org/80731

Source: secalert@redhat.com

Resource: N/A

Hyperlink: http://packetstormsecurity.org/files/111369/Coppermine-1.5.18-Cross-Site-Scripting-Path-Disclosure.html

Source: secalert@redhat.com

Resource:

Exploit

Hyperlink: http://secunia.com/advisories/48643

Source: secalert@redhat.com

Resource:

Vendor Advisory

Hyperlink: http://www.exploit-db.com/exploits/18680

Source: secalert@redhat.com

Resource: N/A

Hyperlink: http://www.openwall.com/lists/oss-security/2012/03/30/5

Source: secalert@redhat.com

Resource:

Exploit

Hyperlink: http://www.openwall.com/lists/oss-security/2012/03/30/6

Source: secalert@redhat.com

Resource: N/A

Hyperlink: http://www.openwall.com/lists/oss-security/2012/04/03/6

Source: secalert@redhat.com

Resource: N/A

Hyperlink: http://www.securityfocus.com/bid/52818

Source: secalert@redhat.com

Resource: N/A

Hyperlink: http://www.waraxe.us/advisory-81.html

Source: secalert@redhat.com

Resource:

Exploit

Hyperlink: http://archives.neohapsis.com/archives/bugtraq/2012-03/0167.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Exploit

Hyperlink: http://coppermine.svn.sourceforge.net/viewvc/coppermine/trunk/cpg1.6.x/edit_one_pic.php?r1=8348&r2=8354

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Patch

Hyperlink: http://forum.coppermine-gallery.net/index.php/topic%2C74682.0.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://osvdb.org/80731

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://packetstormsecurity.org/files/111369/Coppermine-1.5.18-Cross-Site-Scripting-Path-Disclosure.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Exploit

Hyperlink: http://secunia.com/advisories/48643

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Vendor Advisory

Hyperlink: http://www.exploit-db.com/exploits/18680

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.openwall.com/lists/oss-security/2012/03/30/5

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Exploit

Hyperlink: http://www.openwall.com/lists/oss-security/2012/03/30/6

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.openwall.com/lists/oss-security/2012/04/03/6

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.securityfocus.com/bid/52818

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.waraxe.us/advisory-81.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Exploit