CVE-2007-0122

Published Jan 9, 2007 coppermine

Overview

CVE-2007-0122 is a known-severity vulnerability affecting coppermine coppermine_photo_gallery. It was published on January 9, 2007.

Technical Description

Multiple SQL injection vulnerabilities in Coppermine Photo Gallery 1.4.10 and earlier allow remote authenticated administrators to execute arbitrary SQL commands via (1) the cat parameter to albmgr.php, and possibly (2) the gid parameter to usermgr.php; (3) the start parameter to db_ecard.php; and the albumid parameter to unspecified files, related to the (4) filename_to_title and (5) del_titles functions.

Remediation

Check the references section for vendor advisories and patches from coppermine. Update coppermine_photo_gallery to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

Affected Products

Vendor	Product	Versions	Status
coppermine	coppermine_photo_gallery	0	Affected

References

Ref acid-root.new.fr/poc/19070104.txt Ref osvdb.org/35852 Ref osvdb.org/35853 Ref osvdb.org/35854 Ref osvdb.org/35855 Ref osvdb.org/35856 Ref secunia.com/advisories/25846 Ref securityreason.com/securityalert/2123 Ref www.securityfocus.com/archive/1/456051/100/0/threaded Ref www.securityfocus.com/bid/21894

Frequently Asked Questions

What is CVE-2007-0122?

CVE-2007-0122 is a known-severity vulnerability affecting coppermine coppermine_photo_gallery. It was published on January 9, 2007.

How severe is CVE-2007-0122?

CVSS score information is not yet available for this vulnerability. Check back as the CVE record is updated by NVD analysts.

How do I fix or remediate CVE-2007-0122?

How can CyberStrike help with CVE-2007-0122?

CyberStrike's AI-powered security agents can automatically detect CVE-2007-0122 across your infrastructure using autonomous pentesting, DAST scanning, and HackBrowser. The platform continuously monitors for known vulnerabilities and provides actionable remediation guidance prioritized by real-world exploitability.