Coppermine-gallery vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Coppermine-gallery products: 1 record(s), with severity, exploitation and fixes.

Coppermine Photo Gallery 1

Exploited only (KEV) →

CVE-2023-53868 High · 8.8 CWE-434 Dec 15, 2025

Coppermine Gallery 1.6.25 Remote Code Execution via Plugin Upload

Coppermine Gallery 1.6.25 contains a remote code execution vulnerability that allows authenticated attackers to upload malicious PHP files through the plugin manager. Attackers can upload a zipped PHP file with system commands to the plugin directory and execute arbitrary code by accessing the uploaded plugin script.