CVE-2008-1840 — SQL Injection in Photo Gallery

CWE-89 — SQL Injection4 documents4 sources
Severity
6.5MEDIUMNVD
EPSS
0.5%
top 33.34%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Coppermine Photo Gallery
Timeline
PublishedApr 16
Latest updateMay 1

Description

SQL injection vulnerability in upload.php in Coppermine Photo Gallery (CPG) 1.4.16 and earlier allows remote authenticated users or user-assisted remote HTTP servers to execute arbitrary SQL commands via the Content-Type HTTP response header provided by the HTTP server that is used for an upload.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 8.0 | Impact: 6.4

Affected Packages1 packages

Patches

Patch: sourceforge.net ↗Patch: www.securityfocus.com ↗Patch: sourceforge.net ↗

🔴Vulnerability Details

3
GHSA
GHSA-vxj3-6c9j-vg4h: SQL injection vulnerability in upload↗2022-05-01
▶
CVEList
CVE-2008-1840: SQL injection vulnerability in upload↗2008-04-16
▶
VulnCheck
coppermine coppermine_photo_gallery Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')↗2008
▶
CVE-2008-1840 — SQL Injection in Photo Gallery | cvebase