CVE-2014-4612

MEDIUM 6.1CVE-2014-4612 · Published 16/03/2018 · updated 17/06/2026

In short

CVE-2014-4612 is a MEDIUM (CVSS 6.1) vulnerability affecting coppermine photo gallery (coppermine-gallery).
Chance of exploitation in the next 30 days (EPSS): 1.3%, higher than 70.5% of all vulnerabilities.
Fix: update to 1.6.01, 1.5.28 or later.

Package	Affected versions	Patched versions
coppermine photo gallery coppermine-gallery	`≥ 1.6.0, < 1.6.01< 1.5.28`	`1.6.011.5.28`

Description

Cross-site scripting (XSS) vulnerability in the keywords manager (keywordmgr.php) in Coppermine Photo Gallery before 1.5.27 and 1.6.x before 1.6.01 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References

forum.coppermine-gallery.net/index.php/topic%2C77376.0.html
seclists.org/oss-sec/2014/q2/608 · Mailing List
seclists.org/oss-sec/2014/q2/620 · Mailing List
sourceforge.net/p/coppermine/code/8674 · Patch
securityfocus.com/bid/68140 · Third Party Advisory
sourceforge.net/p/coppermine/code/8674/tree//trunk/cpg1.5.x/CHANGELOG.txt · Release Notes
sourceforge.net/p/coppermine/code/8674/tree//trunk/cpg1.6.x/CHANGELOG.txt · Release Notes

More vulnerabilities in coppermine photo gallery

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

coppermine photo gallery

coppermine-gallery

≥ 1.6.0, < 1.6.01< 1.5.28

1.6.011.5.28

More vulnerabilities in coppermine photo gallery

See all →