CVE-2014-4612: XSS
Published Mar 16, 2018
·Updated
Cross-site scripting (XSS) vulnerability in the keywords manager (keywordmgr.php) in Coppermine Photo Gallery before 1.5.27 and 1.6.x before 1.6.01 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
2 affected components
Coppermine-gallery Coppermine Photo Gallery<1.5.28
Coppermine-gallery Coppermine Photo Gallery>=1.6.0<1.6.01
Remediation
Patch Available
Patch Available
Event History
Mar 16, 2018
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-4612?
CVE-2014-4612 is classified as a moderate severity Cross-site Scripting (XSS) vulnerability.
2
How do I fix CVE-2014-4612?
To fix CVE-2014-4612, upgrade Coppermine Photo Gallery to version 1.5.28 or 1.6.01 or later.
3
What software is affected by CVE-2014-4612?
CVE-2014-4612 affects Coppermine Photo Gallery versions prior to 1.5.28 and versions from 1.6.0 to 1.6.01.
4
What types of attacks can CVE-2014-4612 allow?
CVE-2014-4612 may allow attackers to inject arbitrary web scripts or HTML into web pages.
5
How can I detect if I am affected by CVE-2014-4612?
To detect if your system is affected by CVE-2014-4612, check if you are running an outdated version of Coppermine Photo Gallery.