CVE-2006-3064 — SQL Injection in Photo Gallery

CWE-89 — SQL Injection3 documents3 sources
Severity
7.5HIGHNVD
EPSS
0.6%
top 30.41%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Coppermine Photo Gallery
Timeline
PublishedJun 19
Latest updateMay 1

Description

SQL injection vulnerability in the add_hit function in include/function.inc.php in Coppermine Photo Gallery (CPG) 1.4.8, when "Keep detailed hit statistics" is enabled, allows remote attackers to execute arbitrary SQL commands via the (1) referer and (2) user-agent HTTP headers.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-jjch-m4g6-88xg: SQL injection vulnerability in the add_hit function in include/function↗2022-05-01
▶
CVEList
CVE-2006-3064: SQL injection vulnerability in the add_hit function in include/function↗2006-06-19
▶
CVE-2006-3064 — SQL Injection in Photo Gallery | cvebase