Coppermine <= 1.4.12 Cross Site Scripting and Local File Inclusion

as image library with a MySQL backend. —————- Vulnerabilities: —————-. The script mode.php does not properly sanitize the “referer” parameter. The script viewlog.php does not properly sanitize the “log” parameter. …
mysql insertmysql insert

Here is the original post:
Coppermine &lt;= 1.4.12 Cross Site Scripting and Local File Inclusion

Related Posts

• Cross Site Scripting Bug
• SQL Injection SQL injection is yet another common …
• dsa-1557-1.txt
• Sql server hosting - Build Virtual Appliances: SQL Server 2005 - IT
• SQL Injection SQL injection is yet another common vulnerability …