CVE-2015-6528 - CVE House
Back to Database
Status published Medium CVE-2015-6528

Multiple cross-site scripting (XSS) vulnerabilities in install_classic.php in Coppermine Photo...

Vulnerability Description

Multiple cross-site scripting (XSS) vulnerabilities in install_classic.php in Coppermine Photo Gallery (CPG) 1.5.36 allow remote attackers to inject arbitrary web script or HTML via the (1) admin_username, (2) admin_password, (3) admin_email, (4) dbserver, (5) dbname, (6) dbuser, (7) dbpass, (8) table_prefix, or (9) impath parameter.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2015-6528

Credits & Attribution

No credits recorded in the NVD database.

References

More from coppermine-gallery

View All →
CVE-2018-14478
ecard.php in Coppermine Photo Gallery (CPG) 1.5.46 has XSS via...
Medium 6.1
CVE-2015-3923
Coppermine Photo Gallery before 1.5.36 allows remote attackers to enumerate...
Medium 5
CVE-2015-3922
Open redirect vulnerability in mode.php in Coppermine Photo Gallery before...
Medium 5.8
CVE-2015-3921
Cross-site scripting (XSS) vulnerability in contact.php in Coppermine Photo Gallery...
Low 3.5
CVE-2014-4612
Cross-site scripting (XSS) vulnerability in the keywords manager (keywordmgr.php) in...
Medium 6.1

Affected Vendor

coppermine-gallery

View all reports →

Affected Software

coppermine photo gallery
Vulnerable Versions:
1.5.36

Timeline

Official Publish: August 20th, 2015
Last Modified: September 17th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.