coppermine coppermine photo gallery

Name: coppermine coppermine photo gallery
Brand: coppermine

productUS

cpe:2.3:a:coppermine:coppermine_photo_gallery:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

critical

by severity

0critical14high19medium2low

updated 2026-10-28

vulnerabilities (35)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2008-0506US	medium6.8	58.9% (99th)	Exploit	no fix	2008-01-31	≤ 1.4.14
CVE-2004-1986US	medium5.0	10.6% (96th)	Exploit	no fix	2004-04-04	6 versions
CVE-2004-1988US	high7.5	9.33% (95th)	Exploit	no fix	2004-04-30	6 versions
CVE-2004-1989US	high7.5	9.33% (95th)	Exploit	no fix	2004-04-30	6 versions
CVE-2007-4976US	medium6.5	8.52% (95th)	Exploit	no fix	2007-09-19	7 versions
CVE-2004-1985US	medium4.3	3.91% (90th)	Exploit	no fix	2004-04-30	6 versions
CVE-2006-1909US	medium5.0	3.71% (90th)	Exploit	no fix	2006-04-20	= 1.4.4
CVE-2007-4977US	low3.5	3.38% (89th)	Exploit	no fix	2007-09-19	7 versions
CVE-2007-4283US	high7.5	3.37% (89th)	Exploit	no fix	2007-08-09	= 1.3.1
CVE-2006-4321US	high7.5	3.25% (88th)	Exploit	no fix	2006-08-24	= 1.0
CVE-2007-0122US	medium6.5	3.20% (88th)	Exploit	no fix	2007-01-09	15 versions
CVE-2007-1107US	high7.5	2.19% (82nd)	Exploit	no fix	2007-02-26	4 versions
CVE-2007-0836US	medium4.0	1.84% (79th)	Exploit	no fix	2007-02-08	≤ 1.4.10
CVE-2009-1616US	medium4.3	1.65% (76th)	Exploit	no fix	2009-05-11	= 1.4.22
CVE-2006-5622US	high7.5	1.18% (68th)	Exploit	no fix	2006-10-31	= 1.4.9
CVE-2007-3558US	high7.5	1.02% (63rd)	Exploit	no fix	2007-07-04	≤ 1.4.10
CVE-2004-1987US	high7.5	10.2% (96th)	—	no fix	2004-04-30	6 versions
CVE-2007-1414US	high10.0	5.34% (93rd)	—	no fix	2007-03-12	—
CVE-2004-1984US	medium5.0	2.55% (85th)	—	no fix	2004-05-02	6 versions
CVE-2006-0872US	medium5.0	2.36% (84th)	—	no fix	2006-02-24	= 1.4.3
CVE-2008-1841US	medium6.8	1.86% (79th)	—	no fix	2008-04-16	22 versions
CVE-2008-1840US	medium6.5	1.77% (78th)	—	no fix	2008-04-16	16 versions
CVE-2005-1226US	high7.5	1.73% (77th)	—	no fix	2005-05-02	= 1.3.2
CVE-2006-0873US	medium5.0	1.70% (77th)	—	no fix	2006-02-24	= 1.4.3
CVE-2006-2514US	high7.5	1.55% (75th)	—	no fix	2006-05-22	14 versions
CVE-2008-0505US	medium4.3	1.47% (74th)	—	no fix	2008-01-31	5 versions
CVE-2007-0835US	medium6.5	1.46% (73rd)	—	no fix	2007-02-08	≤ 1.4.10
CVE-2006-2976US	high7.5	1.41% (73rd)	—	no fix	2006-06-12	6 versions
CVE-2006-6123US	low2.6	1.35% (71st)	—	no fix	2006-11-26	= 1.4.8_stable
CVE-2006-3064US	high7.5	1.30% (70th)	—	no fix	2006-06-19	= 1.4.8
CVE-2005-1225US	high7.5	1.21% (68th)	—	no fix	2005-05-02	= 1.3.2
CVE-2005-2676US	medium4.3	1.18% (68th)	—	no fix	2005-08-23	9 versions
CVE-2005-1172US	medium4.3	1.18% (68th)	—	no fix	2005-05-02	7 versions
CVE-2007-0115US	medium6.0	1.15% (67th)	—	no fix	2007-01-09	≤ 1.4.10
CVE-2007-5888US	medium4.3	1.06% (65th)	—	no fix	2007-11-07	≤ 1.4.13

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')8 CVEs
CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')8 CVEs
CWE-98Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')6 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')5 CVEs
CWE-99Improper Control of Resource Identifiers ('Resource Injection')5 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')2 CVEs
CWE-94Improper Control of Generation of Code ('Code Injection')2 CVEs
CWE-95Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')2 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE35 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan