Detections
Analytics

CVE-2005-1225

critical

Description

SQL injection vulnerability in Coppermine Photo Gallery 1.3.2 allows remote attackers to execute arbitrary SQL commands via the favs parameter to (1) init.inc.php or (2) zipdownload.php.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/20205

http://www.waraxe.us/advisory-42.html

http://secunia.com/advisories/15004

http://marc.info/?l=bugtraq&m=111402186304179&w=2

Details

Source: Mitre, NVD

Published: 2005-05-02

Updated: 2017-07-11

Risk Information

CVSS v2

Base Score: 7.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Severity: High

CVSS v3

Base Score: 9.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity: Critical