CVE-2007-3558: SQL Injection
Published Jul 4, 2007
·Updated
SQL injection vulnerability in Coppermine Photo Gallery (CPG) before 1.4.11 allows remote attackers to execute arbitrary SQL commands via an album password cookie to an unspecified component.
Affected Software
1 affected component
Coppermine Coppermine Photo Gallery<=1.4.10
Remediation
Patch Available
Patch Available
Event History
Jul 4, 2007
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-3558?
CVE-2007-3558 has been classified with a moderate severity level.
2
How do I fix CVE-2007-3558?
To fix CVE-2007-3558, upgrade Coppermine Photo Gallery to version 1.4.11 or later.
3
What type of attack is possible with CVE-2007-3558?
CVE-2007-3558 allows remote attackers to perform SQL injection attacks.
4
What software versions are affected by CVE-2007-3558?
CVE-2007-3558 affects Coppermine Photo Gallery versions earlier than 1.4.11.
5
What components are vulnerable in CVE-2007-3558?
CVE-2007-3558 affects an unspecified component that utilizes album password cookies.