CVE-2015-3921
NONE EPSS 71.9%
Published May 27, 201511y ago · Modified Jun 17, 20262w ago
Published May 27, 2015 11y ago
Last Modified Jun 17, 2026 2w ago
Description
Cross-site scripting (XSS) vulnerability in contact.php in Coppermine Photo Gallery before 1.5.36 allows remote authenticated users to inject arbitrary web script or HTML via the referer parameter.
Threat Intelligence
EPSS Exploit Probability
71.9% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available
Weaknesses 1
CWE-79 Cross-site Scripting Injection
Affected Products 1
| Vendor | Product | Version | Range |
|---|---|---|---|
| coppermine-gallery | coppermine_photo_gallery | * | ≤1.5.34 |
References 4
- forum.coppermine-gallery.net http://forum.coppermine-gallery.net/index.php/topic%2C78194.0.html
- packetstormsecurity.com http://packetstormsecurity.com/files/132004/Coppermine-Gallery-1.5.34-XSS-Open-Redirection.html
- securityfocus.com http://www.securityfocus.com/bid/74872
- securitytracker.com http://www.securitytracker.com/id/1032558
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.