CVE-2015-6528: XSS

Published Aug 20, 2015

Updated

Multiple cross-site scripting (XSS) vulnerabilities in installclassic.php in Coppermine Photo Gallery (CPG) 1.5.36 allow remote attackers to inject arbitrary web script or HTML via the (1) adminusername, (2) adminpassword, (3) adminemail, (4) dbserver, (5) dbname, (6) dbuser, (7) dbpass, (8) tableprefix, or (9) impath parameter.

Affected Software

1 affected component

Coppermine-gallery Coppermine Photo Gallery=1.5.36

Event History

Aug 20, 2015

CVE Published

via MITRE·08:00 PM

Data Sourced

via MITRE·08:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2015-6528?

CVE-2015-6528 is rated as a medium severity vulnerability due to its potential for exploitation through cross-site scripting.

How do I fix CVE-2015-6528?

To fix CVE-2015-6528, it is recommended to upgrade to a newer version of Coppermine Photo Gallery that addresses the cross-site scripting vulnerabilities.

What vulnerabilities are present in CVE-2015-6528?

CVE-2015-6528 presents multiple cross-site scripting vulnerabilities in the install_classic.php file.

Which version of Coppermine Photo Gallery is affected by CVE-2015-6528?

CVE-2015-6528 affects Coppermine Photo Gallery version 1.5.36.

Can CVE-2015-6528 allow attackers to exploit my system?

Yes, CVE-2015-6528 can allow remote attackers to inject arbitrary web scripts or HTML, potentially compromising the system.