| Package | Affected versions | Patched versions |
|---|---|---|
| coppermine photo gallery | = 1.3= 1.3.2= 1.3.3= 1.3.4 |
SQL injection vulnerability in thumbnails.php in Coppermine Photo Gallery (CPG) 1.3.x allows remote authenticated users to execute arbitrary SQL commands via a cpg131_fav cookie. NOTE: it was later reported that 1.4.10, 1.4.14, and other 1.4.x versions are also affected using similar cookies.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free