CVE-2012-1613
Cross-site scripting (XSS) vulnerability in edit_one_pic.php in Coppermine Photo Gallery before 1...
CVE-2012-1613 is a low vulnerability (CVSS 3.5) in Coppermine-gallery Coppermine Photo Gallery, published September 4, 2012. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 2.19%, the 82nd percentile. No source names a fixed version.
- Severity
- 3.5 LowCVSS 2.0, NVD
- Exploit chance
- 2.19%EPSS, 82nd percentile
- Exploitation
- None known1 public exploit
- Fixed in
- No fix listedNo source names one
Description
Cross-site scripting (XSS) vulnerability in edit_one_pic.php in Coppermine Photo Gallery before 1.5.20 allows remote authenticated users with certain privileges to inject arbitrary web script or HTML via the keywords parameter.
Exploit likelihood
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | coppermine 1.5.18 - Multiple Vulnerabilities | 2012-03-30 |
What each source reports
NVD Score used
Cross-site scripting (XSS) vulnerability in edit_one_pic.php in Coppermine Photo Gallery before 1.5.20 allows remote authenticated users with certain privileges to inject arbitrary web script or HTML via the keywords parameter.
- Record
CVE-2012-1613- CVSS 2.0
- 3.5 Low
AV:N/AC:M/Au:S/C:N/I:P/A:N - Weakness
- CWE-79
- Updated
- 2026-11-02
CVE ListNo score
Cross-site scripting (XSS) vulnerability in edit_one_pic.php in Coppermine Photo Gallery before 1.5.20 allows remote authenticated users with certain privileges to inject arbitrary web script or HTML via the keywords parameter.
- Record
CVE-2012-1613- Updated
- 2026-11-02
EUVDEUVD-2012-1624No score
Cross-site scripting (XSS) vulnerability in edit_one_pic.php in Coppermine Photo Gallery before 1.5.20 allows remote authenticated users with certain privileges to inject arbitrary web script or HTML via the keywords parameter.
- Record
EUVD-2012-1624- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-8cfv-q6j9-hvqgNo score
Cross-site scripting (XSS) vulnerability in edit_one_pic.php in Coppermine Photo Gallery before 1...
Cross-site scripting (XSS) vulnerability in edit_one_pic.php in Coppermine Photo Gallery before 1.5.20 allows remote authenticated users with certain privileges to inject arbitrary web script or HTML via the keywords parameter.
- Record
GHSA-8cfv-q6j9-hvqg- Weakness
- CWE-79
- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
archives.neohapsis.com/archives/bugtraq/2012-03/0167.html
waraxe.us/advisory-81.html
osvdb.org/80731
packetstormsecurity.org/files/111369/Coppermine-1.5.18-Cross-Site-Scripting-Path-Disclosure.html
exploit-db.com/exploits/18680
secunia.com/advisories/48643
Show 9 moreShow less
coppermine.svn.sourceforge.net/viewvc/coppermine/trunk/cpg1.6.x/edit_one_pic.php?r1=8348&r2=8354
securityfocus.com/bid/52818
openwall.com/lists/oss-security/2012/03/30/6
forum.coppermine-gallery.net/index.php/topic%2C74682.0.html
nvd.nist.gov/vuln/detail/CVE-2012-1613
github.com/advisories/GHSA-8cfv-q6j9-hvqg