CVE-2007-0115

no score yetEPSS 1.2%

Static code injection vulnerability in Coppermine Photo Gallery 1.4.10 and earlier allows remote authenticated administrators to execute arbitrary PHP code via the Username to login.php, which is injected into an error message in security.log.php, which can then be accessed using viewlog.php.

EPSS: 1.2% chance of exploitation in the next 30 days; higher than 66% of CVEs (scores of 2026-10-31)
Published: 2007-01-09
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

coppermine:coppermine_photo_gallery

References

http://acid-root.new.fr/poc/19070104.txt
http://osvdb.org/33383
http://securityreason.com/securityalert/2107
http://www.attrition.org/pipermail/vim/2007-January/001218.html
http://www.securityfocus.com/archive/1/456051/100/0/threaded

Check your stack JSON