CVE-2004-1985: XSS
Published Apr 30, 2004
·Updated
Cross-site scripting (XSS) vulnerability in menu.inc.php in Coppermine Photo Gallery 1.2.2b allows remote attackers to inject arbitrary HTML or web script via the CPGURL parameter.
Affected Software
11 affected components
Coppermine Coppermine Photo Gallery=1.0_rc3
Coppermine Coppermine Photo Gallery=1.1_.0
Coppermine Coppermine Photo Gallery=1.1_beta_2
Coppermine Coppermine Photo Gallery=1.2
Coppermine Coppermine Photo Gallery=1.2.1
Coppermine Coppermine Photo Gallery=1.2.2_b
Francisco Burzi PHP-Nuke=6.9
Francisco Burzi PHP-Nuke=7.0
Francisco Burzi PHP-Nuke=7.0_final
Francisco Burzi PHP-Nuke=7.1
Francisco Burzi PHP-Nuke=7.2
Event History
Apr 30, 2004
CVE Published
04:00 AM
May 10, 2005
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-1985?
CVE-2004-1985 is considered a medium severity vulnerability due to its potential for cross-site scripting (XSS) attacks.
2
How do I fix CVE-2004-1985?
To fix CVE-2004-1985, upgrade to the latest version of Coppermine Photo Gallery that addresses this vulnerability.
3
What types of software are affected by CVE-2004-1985?
CVE-2004-1985 affects several versions of Coppermine Photo Gallery and PHP-Nuke.
4
What can attackers do using CVE-2004-1985?
Using CVE-2004-1985, attackers can inject arbitrary HTML or web scripts into the affected application, possibly compromising user security.
5
What versions of Coppermine are impacted by CVE-2004-1985?
CVE-2004-1985 impacts Coppermine Photo Gallery versions 1.0_rc3, 1.1_beta_2, 1.2, and 1.2.2_b.