Test ID:	1.3.6.1.4.1.25623.1.0.52079
Category:	CGI abuses : XSS
Title:	Coppermine Photo Gallery X-Forwarded-For HTML Injection
Summary:	NOSUMMARY
Description:	Description: The remote version of Coppermine Photo Gallery, according to its version number, is vulnerable to an HTML injection attack as a result of blindly trusting the 'X-Forwarded-For:' in http headers, normally used by proxy servers. Versions up to 1.3.2 are known to be vulnerable. Solution : Upgrade to a newer version. Risk factor : Medium CVSS Score: 4.3
Cross-Ref:	BugTraq ID: 13218 Common Vulnerability Exposure (CVE) ID: CVE-2005-1172 http://www.securityfocus.com/bid/13218 Bugtraq: 20050418 Vulnerability in Coppermine Photo Gallery 1.3.* (Google Search) http://marc.info/?l=bugtraq&m=111383800707880&w=2 http://secunia.com/advisories/15004
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.