CVE-2010-4667
Summary
| CVE | CVE-2010-4667 |
|---|---|
| State | PUBLISHED |
| Assigner | redhat |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2011-06-14 17:55:02 UTC |
| Updated | 2026-04-29 01:13:23 UTC |
| Description | Cross-site scripting (XSS) vulnerability in Coppermine Photo Gallery (CPG) before 1.4.27 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. |
Risk And Classification
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
MediumAuthentication
NoneConfidentiality
NoneIntegrity
PartialAvailability
NoneAV:N/AC:M/Au:N/C:N/I:P/A:N
NVD Known Affected Configurations (CPE 2.3)
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| oss-security - Re: CVE Request -- Coppermine Photo Gallery -- cpg1.4.27 / cpg1.5.12 -- XSS flaw | af854a3a-2127-422b-91ae-364da2661108 | www.openwall.com | Patch |
| 347287 – (CVE-2010-4667) <www-apps/coppermine-1.4.27: XSS vulnerability (CVE-2010-4667) | af854a3a-2127-422b-91ae-364da2661108 | bugs.gentoo.org | Patch |
| oss-security - CVE Request -- Coppermine Photo Gallery -- cpg1.4.27 / cpg1.5.12 -- XSS flaw | af854a3a-2127-422b-91ae-364da2661108 | www.openwall.com | Patch |
| forum.coppermine-gallery.net/index.php/topic%2C65023.msg322935.html | af854a3a-2127-422b-91ae-364da2661108 | forum.coppermine-gallery.net | |
| CONFIRM:http://forum.coppermine-gallery.net/index.php/topic,65023.msg322935.html | MITRE | forum.coppermine-gallery.net | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.