CVE-2007-4977

Severity: low (CVSS 3.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.4% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2007-09-19 · updated 2026-06-16
Weakness: CWE-79

Description

Cross-site scripting (XSS) vulnerability in mode.php in Coppermine Photo Gallery (CPG) 1.4.12 and earlier allows remote attackers to inject arbitrary web script or HTML via the referer parameter.

Affected products

Coppermine Photo Gallery: 1.4, 1.4.2, 1.4.4, 1.4.9, 1.4.10, 1.4.11 (+1)

References

http://coppermine-gallery.net/forum/index.php?topic=46847.0
http://osvdb.org/37100
http://secunia.com/advisories/26843
http://securityreason.com/securityalert/3152
http://www.securityfocus.com/archive/1/479757/100/0/threaded
http://www.securityfocus.com/bid/25698
http://www.securitytracker.com/id?1018704
http://www.vupen.com/english/advisories/2007/3194
https://exchange.xforce.ibmcloud.com/vulnerabilities/36659
http://coppermine-gallery.net/forum/index.php?topic=46847.0
http://osvdb.org/37100
http://secunia.com/advisories/26843

Get alerted when CVE-2007-4977 or the next vulnerability affects your stack