CVE Tools
Track your stack

Coppermine

35 CVEs tracked since 2005. Since Apr 2005, none of them reached CISA KEV.

Coppermine CVEs per month

Apr 2005 to May 2009. Point at a month, or focus the strip and use the arrow keys.
Coppermine CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2005-0430
2005-0560
2005-06null or fewer
2005-07null or fewer
2005-0810
2005-09null or fewer
2005-10null or fewer
2005-11null or fewer
2005-12null or fewer
2006-01null or fewer
2006-0220
2006-03null or fewer
2006-0410
2006-0510
2006-0620
2006-07null or fewer
2006-0810
2006-09null or fewer
2006-1010
2006-1110
2006-12null or fewer
2007-0120
2007-0230
2007-0310
2007-04null or fewer
2007-05null or fewer
2007-06null or fewer
2007-0710
2007-0810
2007-0920
2007-10null or fewer
2007-1110
2007-12null or fewer
2008-0120
2008-02null or fewer
2008-03null or fewer
2008-0420
2008-05null or fewer
2008-06null or fewer
2008-07null or fewer
2008-08null or fewer
2008-09null or fewer
2008-10null or fewer
2008-11null or fewer
2008-12null or fewer
2009-01null or fewer
2009-02null or fewer
2009-03null or fewer
2009-04null or fewer
2009-0510

Products

The products that kept showing up in Coppermine's monthly top three, with their CVEs summed over those months.

  1. Coppermine Photo Gallery3520 months

Latest CVEs

The 15 most recently published vulnerabilities affecting Coppermine.

  1. CVE-2023-53868Coppermine Gallery 1.6.25 Remote Code Execution via Plugin Upload8.8
  2. CVE-2009-1616Cross-site scripting (XSS) vulnerability in docs/showdoc.php in Coppermine Photo Gallery (CPG) before 1.4.22 allows remote attackers to inject arbitrary web script or HTML via the css parameter, a ...4.3
  3. CVE-2008-1840SQL injection vulnerability in upload.php in Coppermine Photo Gallery (CPG) 1.4.16 and earlier allows remote authenticated users or user-assisted remote HTTP servers to execute arbitrary SQL comman...6.5
  4. CVE-2008-1841SQL injection vulnerability in the session handling functionality in bridge/coppermine.inc.php in Coppermine Photo Gallery (CPG) 1.4.17 and earlier allows remote attackers to execute arbitrary SQL ...6.8
  5. CVE-2008-0505Multiple cross-site scripting (XSS) vulnerabilities in docs/showdoc.php in Coppermine Photo Gallery (CPG) before 1.4.15 allow remote attackers to inject arbitrary web script or HTML via the (1) h a...4.3
  6. CVE-2008-0506include/imageObjectIM.class.php in Coppermine Photo Gallery (CPG) before 1.4.15, when the ImageMagick picture processing method is configured, allows remote attackers to execute arbitrary commands ...6.8
  7. CVE-2007-5888Cross-site scripting (XSS) vulnerability in displayecard.php in Coppermine Photo Gallery (CPG) before 1.4.14 allows remote attackers to inject arbitrary web script or HTML via the data parameter.4.3
  8. CVE-2007-4977Cross-site scripting (XSS) vulnerability in mode.php in Coppermine Photo Gallery (CPG) 1.4.12 and earlier allows remote attackers to inject arbitrary web script or HTML via the referer parameter.3.5
  9. CVE-2007-4976Directory traversal vulnerability in viewlog.php in Coppermine Photo Gallery (CPG) 1.4.12 and earlier allows remote authenticated administrators to include and execute arbitrary local files via a ....6.5
  10. CVE-2007-4283PHP remote file inclusion vulnerability in bridge/yabbse.inc.php in Coppermine Photo Gallery (CPG) 1.3.1 allows remote attackers to execute arbitrary PHP code via a URL in the sourcedir parameter.7.5
  11. CVE-2007-3558SQL injection vulnerability in Coppermine Photo Gallery (CPG) before 1.4.11 allows remote attackers to execute arbitrary SQL commands via an album password cookie to an unspecified component.7.5
  12. CVE-2007-1414Multiple PHP remote file inclusion vulnerabilities in Coppermine Photo Gallery (CPG) allow remote attackers to execute arbitrary PHP code via a URL in the (1) cmd parameter to (a) image_processor.p...10.0
  13. CVE-2007-1107SQL injection vulnerability in thumbnails.php in Coppermine Photo Gallery (CPG) 1.3.x allows remote authenticated users to execute arbitrary SQL commands via a cpg131_fav cookie. NOTE: it was late...7.5
  14. CVE-2007-0835admin.php in Coppermine Photo Gallery 1.4.10, and possibly earlier, allows remote authenticated users to execute arbitrary shell commands via shell metacharacters (";" semicolon) in the "Command li...6.5
  15. CVE-2007-0836admin.php in Coppermine Photo Gallery 1.4.10, and possibly earlier, allows remote authenticated users to include arbitrary local and possibly remote files via the (1) "Path to custom header include...4.0

The record

Peak rank
#15 in May 2005
Busiest month shown
May 2005, 6 CVEs
Months with a KEV entry
0 since Apr 2005
Monthly snapshots
20 since 2005
Coppermine's full record, month by month

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store