Coppermine Coppermine-gallery vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Coppermine Coppermine-gallery: 1 record(s), with affected versions and fixes.
CVE-2023-53868
High · 8.8
CWE-434 Dec 15, 2025
Coppermine Gallery 1.6.25 Remote Code Execution via Plugin Upload
Coppermine Gallery 1.6.25 contains a remote code execution vulnerability that allows authenticated attackers to upload malicious PHP files through the plugin manager. Attackers can upload a zipped PHP file with system commands to the plugin directory and execute arbitrary code by accessing the uploaded plugin script.