CVE-2012-1613: XSS
Published Sep 4, 2012
·Updated
Cross-site scripting (XSS) vulnerability in editonepic.php in Coppermine Photo Gallery before 1.5.20 allows remote authenticated users with certain privileges to inject arbitrary web script or HTML via the keywords parameter.
Affected Software
59 affected components
Coppermine-gallery Coppermine Photo Gallery<=1.5.18
Coppermine-gallery Coppermine Photo Gallery=1.0
Coppermine-gallery Coppermine Photo Gallery=1.0-rc3
Coppermine-gallery Coppermine Photo Gallery=1.1
Coppermine-gallery Coppermine Photo Gallery=1.1-beta_2
Coppermine-gallery Coppermine Photo Gallery=1.1.0
Coppermine-gallery Coppermine Photo Gallery=1.2
Coppermine-gallery Coppermine Photo Gallery=1.2.0
Coppermine-gallery Coppermine Photo Gallery=1.2.0-rc2
Coppermine-gallery Coppermine Photo Gallery=1.2.1
Coppermine-gallery Coppermine Photo Gallery=1.2.1-b
Coppermine-gallery Coppermine Photo Gallery=1.2.1-b-nuke
Coppermine-gallery Coppermine Photo Gallery=1.3.0
Coppermine-gallery Coppermine Photo Gallery=1.3.1
Coppermine-gallery Coppermine Photo Gallery=1.3.2
Coppermine-gallery Coppermine Photo Gallery=1.3.3
Coppermine-gallery Coppermine Photo Gallery=1.3.4
Coppermine-gallery Coppermine Photo Gallery=1.3.5
Coppermine-gallery Coppermine Photo Gallery=1.4.0
Coppermine-gallery Coppermine Photo Gallery=1.4.0-alpha
Coppermine-gallery Coppermine Photo Gallery=1.4.0-beta
Coppermine-gallery Coppermine Photo Gallery=1.4.1
Coppermine-gallery Coppermine Photo Gallery=1.4.1-beta
Coppermine-gallery Coppermine Photo Gallery=1.4.2
Coppermine-gallery Coppermine Photo Gallery=1.4.3
Coppermine-gallery Coppermine Photo Gallery=1.4.4
Coppermine-gallery Coppermine Photo Gallery=1.4.5
Coppermine-gallery Coppermine Photo Gallery=1.4.6
Coppermine-gallery Coppermine Photo Gallery=1.4.7
Coppermine-gallery Coppermine Photo Gallery=1.4.8
Coppermine-gallery Coppermine Photo Gallery=1.4.9
Coppermine-gallery Coppermine Photo Gallery=1.4.10
Coppermine-gallery Coppermine Photo Gallery=1.4.11
Coppermine-gallery Coppermine Photo Gallery=1.4.12
Coppermine-gallery Coppermine Photo Gallery=1.4.13
Coppermine-gallery Coppermine Photo Gallery=1.4.14
Coppermine-gallery Coppermine Photo Gallery=1.4.15
Coppermine-gallery Coppermine Photo Gallery=1.4.16
Coppermine-gallery Coppermine Photo Gallery=1.4.17
Coppermine-gallery Coppermine Photo Gallery=1.4.18
Coppermine-gallery Coppermine Photo Gallery=1.4.19
Coppermine-gallery Coppermine Photo Gallery=1.4.20
Coppermine-gallery Coppermine Photo Gallery=1.4.21
Coppermine-gallery Coppermine Photo Gallery=1.4.22
Coppermine-gallery Coppermine Photo Gallery=1.4.23
Coppermine-gallery Coppermine Photo Gallery=1.4.24
Coppermine-gallery Coppermine Photo Gallery=1.4.25
Coppermine-gallery Coppermine Photo Gallery=1.4.26
Coppermine-gallery Coppermine Photo Gallery=1.4.27
Coppermine-gallery Coppermine Photo Gallery=1.5.1-alpha
Coppermine-gallery Coppermine Photo Gallery=1.5.2-beta
Coppermine-gallery Coppermine Photo Gallery=1.5.3-rc
Coppermine-gallery Coppermine Photo Gallery=1.5.4
Coppermine-gallery Coppermine Photo Gallery=1.5.6
Coppermine-gallery Coppermine Photo Gallery=1.5.8
Coppermine-gallery Coppermine Photo Gallery=1.5.10
Coppermine-gallery Coppermine Photo Gallery=1.5.12
Coppermine-gallery Coppermine Photo Gallery=1.5.14
Coppermine-gallery Coppermine Photo Gallery=1.5.16
Remediation
Event History
Sep 4, 2012
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-1613?
The severity of CVE-2012-1613 is typically categorized as medium due to the potential for cross-site scripting attacks.
2
How do I fix CVE-2012-1613?
To fix CVE-2012-1613, upgrade Coppermine Photo Gallery to version 1.5.20 or later.
3
Who is affected by CVE-2012-1613?
CVE-2012-1613 affects remote authenticated users in Coppermine Photo Gallery versions prior to 1.5.20.
4
What type of vulnerability is CVE-2012-1613?
CVE-2012-1613 is a cross-site scripting (XSS) vulnerability.
5
What parameters are exploited in CVE-2012-1613?
The vulnerability in CVE-2012-1613 is exploited through the 'keywords' parameter in edit_one_pic.php.