CVE:CVE-2007-1107
CNNVD:CNNVD-200702-519
Coppermine Photo Gallery (CPG) 1.3.x版本的thumbnails.php中存在SQL注入漏洞。远程认证用户可借助cpg131_fav cookie执行任意SQL命令。
solution:Upgrade coppermine coppermine_photo_gallery to a higher version than 1.3,1.3.2,1.3.3,1.3.4,and avoid the version 1.3,1.3.2,1.3.3,1.3.4