CVE-2014-4612

Cross-site scripting (XSS) vulnerability in the keywords manager (keywordmgr.php) in Coppermine Photo Gallery before 1.5.27 and 1.6.x before 1.6.01 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

• CWE-79

• http://forum.coppermine-gallery.net/index.php/topic%2C77376.0.html
• http://seclists.org/oss-sec/2014/q2/608Mailing List, Patch, Third Party Advisory
• http://seclists.org/oss-sec/2014/q2/620Mailing List, Third Party Advisory
• http://sourceforge.net/p/coppermine/code/8674Patch
• http://www.securityfocus.com/bid/68140Third Party Advisory, VDB Entry
• https://sourceforge.net/p/coppermine/code/8674/tree//trunk/cpg1.5.x/CHANGELOG.txtRelease Notes
• https://sourceforge.net/p/coppermine/code/8674/tree//trunk/cpg1.6.x/CHANGELOG.txtRelease Notes
• http://forum.coppermine-gallery.net/index.php/topic%2C77376.0.html
• http://seclists.org/oss-sec/2014/q2/608Mailing List, Patch, Third Party Advisory
• http://seclists.org/oss-sec/2014/q2/620Mailing List, Third Party Advisory
• http://sourceforge.net/p/coppermine/code/8674Patch
• http://www.securityfocus.com/bid/68140Third Party Advisory, VDB Entry
• https://sourceforge.net/p/coppermine/code/8674/tree//trunk/cpg1.5.x/CHANGELOG.txtRelease Notes
• https://sourceforge.net/p/coppermine/code/8674/tree//trunk/cpg1.6.x/CHANGELOG.txtRelease Notes

Published

Mar 16, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-4606Cross-site scripting (XSS) vulnerability in redirect_to_zeen…
• CVE-2014-4607Integer overflow in the LZO algorithm variant in Oberhumer l…8.8
• CVE-2014-4608Multiple integer overflows in the lzo1x_decompress_safe func…7.3
• CVE-2014-4609Integer overflow in the get_len function in libavutil/lzo.c …8.8
• CVE-2014-4610Integer overflow in the get_len function in libavutil/lzo.c …8.8
• CVE-2014-4611Integer overflow in the LZ4 algorithm implementation, as use…
• CVE-2014-4613Cross-site request forgery (CSRF) vulnerability in the admin…
• CVE-2014-4614Multiple cross-site request forgery (CSRF) vulnerabilities i…
• CVE-2014-4615The notifier middleware in OpenStack PyCADF 0.5.0 and earlie…
• CVE-2014-4616Array index error in the scanstring function in the _json mo…5.9
• CVE-2014-4617The do_uncompress function in g10/compress.c in GnuPG 1.x be…
• CVE-2014-4618EMC Documentum Content Server before 6.7 SP2 P16 and 7.x bef…