CVE-2010-4693

Exp

Multiple cross-site scripting (XSS) vulnerabilities in Coppermine Photo Gallery 1.5.10 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) h and (2) t parameters to help.php, or (3) picfile_XXX parameter to searchnew.php.

Published: 2011-01-11 Last update: 2026-04-29 Assigner: [email protected] Source: [email protected]

Conclusion & alert: CVE-2010-4693 is rated Exploit Available (59.6/100): CVSS Medium severity, with medium exploitation likelihood (EPSS 1.81%). Core evidence: 5 public exploit reference(s) are indexed (Exploit-DB). Mandatory action: Public exploits are available—assess exposure, apply mitigations, and prioritize patching.

Risk is dynamic; we continuously reassess and refresh what is shown on this page as upstream context changes.

Public exploit references (Exploit-DB) for CVE-2010-4693

EDB-ID Source Kind Published Link
35157 exploit_db edb 2010-12-28 Exploit-DB ↗
35156 exploit_db edb 2010-12-28 Exploit-DB ↗
nvd_ref exploit_tag Exploit-DB ↗
nvd_ref exploit_tag Exploit-DB ↗
nvd_ref exploit_tag Exploit-DB ↗

Exploit prediction scoring system (EPSS) score for CVE-2010-4693

EPSS lead: Daily EPSS estimates relative likelihood of exploitation; percentile ranks this CVE among scored vulnerabilities (higher = more severe relative rank).

# Date Old EPSS score New EPSS score Delta (New - Old)
1 2026-06-15 0.88% 1.81% +0.92%
2 2026-04-06 1.17% 0.88% -0.28%
3 2026-04-02 1.17%

Full EPSS history (14 records total)

Common vulnerability scoring system (CVSS) metrics for CVE-2010-4693

CVSS metrics for this CVE.

Base score Version Severity Vector Exploitability Impact Score source
4.3 2.0 MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N Click to expand
Access vector (AV:N)
Can be exploited remotely over network reachability.
Access complexity (AC:M)
Exploitation needs some favorable conditions, but not exceptional ones.
Authentication (AU:N)
No authentication is required.
Confidentiality impact (C:N)
No confidentiality impact.
Integrity impact (I:P)
Partial integrity impact.
Availability impact (A:N)
No availability impact.
8.6 2.9 [email protected]

Weakness enumeration for CVE-2010-4693

Affected software / configurations for CVE-2010-4693

Vendor Product Version Raw CPE
coppermine-gallery coppermine_photo_gallery <= 1.5.10 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:*:*:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.0 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.0:*:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.0 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.0:rc3:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.1 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.1:*:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.1 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.1:beta_2:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.1.0 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.1.0:*:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.2 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.2:*:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.2.0 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.2.0:*:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.2.0 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.2.0:rc2:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.2.1 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.2.1:*:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.2.1 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.2.1:b:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.2.1 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.2.1:b-nuke:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.3.0 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.3.0:*:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.3.1 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.3.1:*:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.3.2 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.3.2:*:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.3.3 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.3.3:*:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.3.4 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.3.4:*:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.3.5 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.3.5:*:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.4 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4:*:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.4 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4:beta:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.4.0 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.0:*:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.4.0 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.0:alpha:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.4.0 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.0:beta:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.4.1 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.1:*:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.4.1 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.1:beta:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.4.2 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.2:*:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.4.3 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.3:*:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.4.4 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.4:*:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.4.5 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.5:*:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.4.6 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.6:*:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.4.7 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.7:*:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.4.8 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.8:*:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.4.9 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.9:*:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.4.10 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.10:*:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.4.11 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.11:*:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.4.12 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.12:*:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.4.13 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.13:*:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.4.14 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.14:*:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.4.15 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.15:*:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.4.16 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.16:*:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.4.17 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.17:*:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.4.18 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.18:*:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.4.19 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.19:*:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.4.20 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.20:*:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.4.21 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.21:*:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.4.22 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.22:*:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.4.23 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.23:*:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.4.24 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.24:*:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.4.25 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.25:*:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.4.26 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.26:*:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.4.27 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.27:*:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.5.1 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.5.1:alpha:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.5.2 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.5.2:beta:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.5.3 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.5.3:rc:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.5.4 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.5.4:*:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.5.6 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.5.6:*:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.5.8 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.5.8:*:*:*:*:*:*:*

References for CVE-2010-4693

cvelogic Threat Intelligence