CVE-2007-3558: Coppermine Photo Gallery

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

SQL injection vulnerability in Coppermine Photo Gallery (CPG) before 1.4.11 allows remote attackers to execute arbitrary SQL commands via an album password cookie to an unspecified component.

Affected products

• Coppermine Coppermine Photo Gallery: up to and including 1.4.10

Published 2007-07-04. Last modified 2026-06-16.