CVE-2006-6123

Coppermine Photo Gallery (CPG) 1.4.8 stable, with register_globals enabled, allows remote attackers to bypass XSS protection and set arbitrary variables via a…

published November 26, 2006

CVSS
—
EPSS
1%
Percentile
71.2
In the wild
Unconfirmed
What it is

Coppermine Photo Gallery (CPG) 1.4.8 stable, with register_globals enabled, allows remote attackers to bypass XSS protection and set arbitrary variables via a query string that causes the variable to be defined in global space, with separate _GET, _REQUEST, or other critical parameters, which are unset by the protection scheme and prevent the original variable from being detected.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01348 · 71.2th percentile
Published
2006-11-26T23:00Z
EPSS history
Timeline
  • 26 NOV 23:00Z
    Coppermine Photo Gallery (CPG) 1.4.8 stable, with register_globals enabled, allows remote attackers to bypass XSS protection and set arbitrary variables via a…
    cvelistv5