Unrated severityNVD Advisory· Published Feb 26, 2007· Updated Jun 16, 2026
CVE-2007-1107
CVE-2007-1107
Description
SQL injection vulnerability in thumbnails.php in Coppermine Photo Gallery (CPG) 1.3.x allows remote authenticated users to execute arbitrary SQL commands via a cpg131_fav cookie. NOTE: it was later reported that 1.4.10, 1.4.14, and other 1.4.x versions are also affected using similar cookies.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
5cpe:2.3:a:coppermine:coppermine_photo_gallery:1.3:*:*:*:*:*:*:*+ 4 more
- cpe:2.3:a:coppermine:coppermine_photo_gallery:1.3:*:*:*:*:*:*:*
- cpe:2.3:a:coppermine:coppermine_photo_gallery:1.3.2:*:*:*:*:*:*:*
- cpe:2.3:a:coppermine:coppermine_photo_gallery:1.3.3:*:*:*:*:*:*:*
- cpe:2.3:a:coppermine:coppermine_photo_gallery:1.3.4:*:*:*:*:*:*:*
- (no CPE)range: <=1.4.14
Patches
Vulnerability mechanics
References
10- osvdb.org/33133nvd
- securityreason.com/securityalert/2297nvd
- www.securityfocus.com/archive/1/461158/100/0/threadednvd
- www.securityfocus.com/bid/22709nvd
- www.securityfocus.com/bid/27372nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/32688nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/39806nvd
- www.exploit-db.com/exploits/3371nvd
- www.exploit-db.com/exploits/4950nvd
- www.exploit-db.com/exploits/4961nvd
News mentions
0No linked articles in our index yet.