Test ID:	1.3.6.1.4.1.25623.1.0.100175
Category:	Web application abuses
Title:	Coppermine Photo Gallery 'css' Parameter Cross-Site Scripting Vulnerability
Summary:	Coppermine Photo Gallery is prone to a cross-site scripting; vulnerability because the application fails to properly sanitize user-supplied input.
Description:	Summary: Coppermine Photo Gallery is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. Vulnerability Impact: An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks. Affected Software/OS: Versions prior to Coppermine Photo Gallery 1.4.22 are vulnerable. Solution: Update to version 1.4.22 or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2009-1616 BugTraq ID: 34782 http://www.securityfocus.com/bid/34782 http://osvdb.org/54145 http://secunia.com/advisories/34961
Copyright	Copyright (C) 2009 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.