CVE-2012-1614

Exp

Coppermine Photo Gallery before 1.5.20 allows remote attackers to obtain sensitive information via (1) a direct request to plugins/visiblehookpoints/index.php, an invalid (2) page or (3) cat parameter to thumbnails.php, an invalid (4) page parameter to usermgr.php, or an invalid (5) newer_than or (6) older_than parameter to search.inc.php, which reveals the installation path in an error message.

Published: 2012-09-04 Last update: 2026-06-16 Assigner: [email protected] Source: [email protected]
NVD Status：Modified，CVE State: published
View at NVD, CVE.org, EUVD

CVE-2012-1614 is rated High Exploit Risk (64.1/100): CVSS Medium severity, with high exploitation likelihood (EPSS 8.71%, 94th percentile). 10 public exploit reference(s) are indexed (Exploit-DB). Public exploits are available—assess exposure, apply mitigations, and prioritize patching.

Risk is dynamic; we continuously reassess and refresh what is shown on this page as upstream context changes.

Public exploit references (Exploit-DB) for CVE-2012-1614

EDB-ID Source Kind Published Link
18680 exploit_db edb 2012-03-30 Exploit-DB ↗
— nvd_ref exploit_tag Exploit-DB ↗
— nvd_ref exploit_tag Exploit-DB ↗
— nvd_ref exploit_tag Exploit-DB ↗
— nvd_ref exploit_tag Exploit-DB ↗
— nvd_ref exploit_tag Exploit-DB ↗
— nvd_ref exploit_tag Exploit-DB ↗
— nvd_ref exploit_tag Exploit-DB ↗
— nvd_ref exploit_tag Exploit-DB ↗
— nvd_ref exploit_tag Exploit-DB ↗

Exploit prediction scoring system (EPSS) score for CVE-2012-1614

EPSS lead: Daily EPSS estimates relative likelihood of exploitation; percentile ranks this CVE among scored vulnerabilities (higher = more severe relative rank).

# Date Old EPSS score New EPSS score Delta (New - Old)
1 2026-06-15 12.63% 8.71% -3.92%
2 2026-05-06 14.12% 12.63% -1.49%
3 2026-01-04 — 14.12% —

Full EPSS history (16 records total)

Common vulnerability scoring system (CVSS) metrics for CVE-2012-1614

CVSS metrics for this CVE.

Base score Version Severity Vector Exploitability Impact Score source
5.0 2.0 MEDIUM
AV:N/AC:L/Au:N/C:P/I:N/A:N Click to expand
Access vector (AV:N)
Can be exploited remotely over network reachability.
Access complexity (AC:L)
Exploitation conditions are straightforward and predictable.
Authentication (AU:N)
No authentication is required.
Confidentiality impact (C:P)
Partial confidentiality impact.
Integrity impact (I:N)
No integrity impact.
Availability impact (A:N)
No availability impact.
 10.0 2.9 [email protected]

Weakness enumeration for CVE-2012-1614

Affected software / configurations for CVE-2012-1614

Vendor Product Version Raw CPE
coppermine-gallery coppermine_photo_gallery <= 1.5.18 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:*:*:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.0 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.0:*:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.0 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.0:rc3:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.1 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.1:*:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.1 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.1:beta_2:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.1.0 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.1.0:*:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.2 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.2:*:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.2.0 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.2.0:*:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.2.0 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.2.0:rc2:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.2.1 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.2.1:*:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.2.1 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.2.1:b:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.2.1 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.2.1:b-nuke:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.3.0 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.3.0:*:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.3.1 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.3.1:*:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.3.2 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.3.2:*:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.3.3 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.3.3:*:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.3.4 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.3.4:*:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.3.5 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.3.5:*:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.4 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4:*:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.4 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4:beta:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.4.0 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.0:*:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.4.0 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.0:alpha:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.4.0 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.0:beta:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.4.1 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.1:*:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.4.1 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.1:beta:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.4.2 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.2:*:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.4.3 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.3:*:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.4.4 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.4:*:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.4.5 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.5:*:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.4.6 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.6:*:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.4.7 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.7:*:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.4.8 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.8:*:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.4.9 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.9:*:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.4.10 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.10:*:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.4.11 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.11:*:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.4.12 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.12:*:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.4.13 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.13:*:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.4.14 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.14:*:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.4.15 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.15:*:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.4.16 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.16:*:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.4.17 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.17:*:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.4.18 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.18:*:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.4.19 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.19:*:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.4.20 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.20:*:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.4.21 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.21:*:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.4.22 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.22:*:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.4.23 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.23:*:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.4.24 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.24:*:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.4.25 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.25:*:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.4.26 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.26:*:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.4.27 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.27:*:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.5.1 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.5.1:alpha:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.5.2 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.5.2:beta:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.5.3 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.5.3:rc:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.5.4 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.5.4:*:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.5.6 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.5.6:*:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.5.8 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.5.8:*:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.5.10 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.5.10:*:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.5.12 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.5.12:*:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.5.14 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.5.14:*:*:*:*:*:*:*
coppermine-gallery coppermine_photo_gallery 1.5.16 cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.5.16:*:*:*:*:*:*:*

References for CVE-2012-1614

URL Tags
http://archives.neohapsis.com/archives/bugtraq/2012-03/0167.html Exploit
http://coppermine.svn.sourceforge.net/viewvc/coppermine/trunk/cpg1.6.x/edit_one_pic.php?r1=8348&r2=8354 Patch
http://forum.coppermine-gallery.net/index.php/topic%2C74682.0.html
http://osvdb.org/80732 Exploit
http://osvdb.org/80733 Exploit
http://osvdb.org/80734 Exploit
http://osvdb.org/80735 Exploit
http://packetstormsecurity.org/files/111369/Coppermine-1.5.18-Cross-Site-Scripting-Path-Disclosure.html Exploit
http://www.exploit-db.com/exploits/18680 Exploit
http://www.openwall.com/lists/oss-security/2012/03/30/5
http://www.openwall.com/lists/oss-security/2012/03/30/6
http://www.openwall.com/lists/oss-security/2012/04/03/6 Exploit
http://www.securityfocus.com/bid/52818
http://www.waraxe.us/advisory-81.html Exploit
cvelogic Threat Intelligence