Coppermine Photo Gallery displayimage.php SQL Injection

high Nessus Plugin ID 11564

Language:

Synopsis

A web application running on the remote web server has a SQL injection vulnerability.

Description

The remote host is running Coppermine Gallery - a set of PHP scripts designed to handle galleries of pictures.

This product has a vulnerability which allows a remote attacker to execute arbitrary SQL queries.

Solution

Upgrade to Coppermine 1.1 beta 3 or later.

Plugin Details

Severity: High

ID: 11564

File Name: coppermine_gallery_sql_injection.nasl

Version: 1.18

Type: remote

Family: CGI abuses

Published: 5/4/2003

Updated: 1/19/2021

Supported Sensors: Nessus

Vulnerability Information

Exploit Available: true

Exploit Ease: No exploit is required

Reference Information

BID: 7471

Detections

Analytics