Unrated severityNVD Advisory· Published Feb 26, 2007· Updated Apr 23, 2026
CVE-2007-1107
CVE-2007-1107
Description
SQL injection vulnerability in thumbnails.php in Coppermine Photo Gallery (CPG) 1.3.x allows remote authenticated users to execute arbitrary SQL commands via a cpg131_fav cookie. NOTE: it was later reported that 1.4.10, 1.4.14, and other 1.4.x versions are also affected using similar cookies.
Affected products
4cpe:2.3:a:coppermine:coppermine_photo_gallery:1.3:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:coppermine:coppermine_photo_gallery:1.3:*:*:*:*:*:*:*
- cpe:2.3:a:coppermine:coppermine_photo_gallery:1.3.2:*:*:*:*:*:*:*
- cpe:2.3:a:coppermine:coppermine_photo_gallery:1.3.3:*:*:*:*:*:*:*
- cpe:2.3:a:coppermine:coppermine_photo_gallery:1.3.4:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
10- osvdb.org/33133nvd
- securityreason.com/securityalert/2297nvd
- www.securityfocus.com/archive/1/461158/100/0/threadednvd
- www.securityfocus.com/bid/22709nvd
- www.securityfocus.com/bid/27372nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/32688nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/39806nvd
- www.exploit-db.com/exploits/3371nvd
- www.exploit-db.com/exploits/4950nvd
- www.exploit-db.com/exploits/4961nvd
News mentions
0No linked articles in our index yet.