CVE-2008-1840

no score yetEPSS 1.8%

coppermine coppermine photo gallery: no CVSS score yet. EPSS 1.8% chance of exploitation in the next 30 days.

SQL injection vulnerability in upload.php in Coppermine Photo Gallery (CPG) 1.4.16 and earlier allows remote authenticated users or user-assisted remote HTTP servers to execute arbitrary SQL commands via the Content-Type HTTP response header provided by the HTTP server that is used for an upload.

EPSS: 1.8% chance of exploitation in the next 30 days; higher than 78% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2008-04-16
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

coppermine:coppermine_photo_gallery

References

http://forum.coppermine-gallery.net/index.php/topic%2C51787%2C0.html
http://secunia.com/advisories/29795
http://sourceforge.net/project/shownotes.php?group_id=89658&release_id=592069
http://www.osvdb.org/44345
http://www.securityfocus.com/bid/28766

Check your stack JSON