Coppermine Photo Gallery CVE-2015-3922 Open Redirection Vulnerability
BID:74869
Info
Coppermine Photo Gallery CVE-2015-3922 Open Redirection Vulnerability
| Bugtraq ID: | 74869 |
| Class: | Input Validation Error |
| CVE: |
CVE-2015-3922 |
| Remote: | Yes |
| Local: | No |
| Published: | May 27 2015 12:00AM |
| Updated: | May 27 2015 12:00AM |
| Credit: | Mahendra |
| Vulnerable: |
Coppermine Photo Gallery 1.5.34 Coppermine Photo Gallery 1.5.20 Coppermine Photo Gallery 1.5.18 Coppermine Photo Gallery 1.5.12 Coppermine Photo Gallery 1.5.10 Coppermine Photo Gallery 1.5.8 Coppermine Photo Gallery 1.4.27 Coppermine Photo Gallery 1.4.26 Coppermine Photo Gallery 1.4.25 Coppermine Photo Gallery 1.4.22 Coppermine Photo Gallery 1.4.21 Coppermine Photo Gallery 1.4.20 Coppermine Photo Gallery 1.4.18 Coppermine Photo Gallery 1.4.17 Coppermine Photo Gallery 1.4.16 Coppermine Photo Gallery 1.4.15 Coppermine Photo Gallery 1.4.14 Coppermine Photo Gallery 1.4.13 Coppermine Photo Gallery 1.4.12 Coppermine Photo Gallery 1.4.11 Coppermine Photo Gallery 1.4.10 Coppermine Photo Gallery 1.4.9 Coppermine Photo Gallery 1.4.4 Coppermine Photo Gallery 1.4.3 Coppermine Photo Gallery 1.4.2 Coppermine Photo Gallery 1.4 Coppermine Photo Gallery 1.3.4 Coppermine Photo Gallery 1.3.3 Coppermine Photo Gallery 1.3.2 Coppermine Photo Gallery 1.3.1 Coppermine Photo Gallery 1.3 Coppermine Photo Gallery 1.2.1 Coppermine Photo Gallery 1.2 Coppermine Photo Gallery 1.5.28 Coppermine Photo Gallery 1.5.27 Coppermine Photo Gallery 1.0 |
| Not Vulnerable: |
Coppermine Photo Gallery 1.5.36 |
Discussion
Coppermine Photo Gallery CVE-2015-3922 Open Redirection Vulnerability
Coppermine Photo Gallery is prone to an open-redirection vulnerability because it fails to properly sanitize user-supplied input.
An attacker can leverage this issue by constructing a crafted URI and enticing a user to follow it. When an unsuspecting victim follows the link, they may be redirected to an attacker-controlled site; this may aid in phishing attacks. Other attacks are possible.
Versions prior to Coppermine Photo Gallery 1.5.36 are vulnerable.
Coppermine Photo Gallery is prone to an open-redirection vulnerability because it fails to properly sanitize user-supplied input.
An attacker can leverage this issue by constructing a crafted URI and enticing a user to follow it. When an unsuspecting victim follows the link, they may be redirected to an attacker-controlled site; this may aid in phishing attacks. Other attacks are possible.
Versions prior to Coppermine Photo Gallery 1.5.36 are vulnerable.
References
Coppermine Photo Gallery CVE-2015-3922 Open Redirection Vulnerability
References:
References:
- Coppermine Photo Gallery Homepage (Coppermine Photo Gallery)
- cpg1.5.36 Security release - upgrade mandatory! (forum.coppermine-gallery)