Unrated severityNVD Advisory· Published May 11, 2009· Updated Jun 16, 2026

CVE-2009-1616

Description

Cross-site scripting (XSS) vulnerability in docs/showdoc.php in Coppermine Photo Gallery (CPG) before 1.4.22 allows remote attackers to inject arbitrary web script or HTML via the css parameter, a different vector than CVE-2008-0505.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Coppermine/Coppermine Photo Galleryllm-fuzzy2 versions
<1.4.22+ 1 more
- (no CPE)range: <1.4.22
- cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4.22:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

www.securityfocus.com/bid/34782nvdExploit
secunia.com/advisories/34961nvdVendor Advisory
forum.coppermine-gallery.net/index.php/topic%2C59237.0.htmlnvd
forum.coppermine-gallery.net/index.php/topic%2C59247.0.htmlnvd
osvdb.org/54145nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000