CVE-2005-1225: SQL Injection

Published Apr 22, 2005

Updated

SQL injection vulnerability in Coppermine Photo Gallery 1.3.2 allows remote attackers to execute arbitrary SQL commands via the favs parameter to (1) init.inc.php or (2) zipdownload.php.

Affected Software

1 affected component

Coppermine Coppermine Photo Gallery=1.3.2

Remediation

Patch Available

http://secunia.com/advisories/15004

Event History

Apr 22, 2005

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2005-1225?

CVE-2005-1225 has a high severity rating due to its potential for SQL injection attacks that can lead to the execution of arbitrary SQL commands.

How do I fix CVE-2005-1225?

To fix CVE-2005-1225, you should upgrade Coppermine Photo Gallery to a more recent version that has addressed this SQL injection vulnerability.

Who is affected by CVE-2005-1225?

CVE-2005-1225 affects users of Coppermine Photo Gallery version 1.3.2.

What type of vulnerability is CVE-2005-1225?

CVE-2005-1225 is an SQL injection vulnerability that allows attackers to manipulate database queries.

What are the potential consequences of CVE-2005-1225?

The potential consequences of CVE-2005-1225 include unauthorized access to the database, data manipulation, or deletion.