SQL injection vulnerability in Coppermine Photo Gallery (CPG) before 1.4.11 allows remote attackers to execute arbitrary SQL commands via an album password cookie to an unspecified component.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Coppermine_photo_gallery | Coppermine | * | 1.4.10 (including) |