CVE-2004-1985
No fix known EPSS 4%
Cross-site scripting (XSS) vulnerability in menu.inc.php in Coppermine Photo Gallery 1.2.2b allows remote attackers to inject arbitrary HTML or web script via the CPG_URL parameter.
Products: coppermine_photo_gallery, francisco_burzi php-nuke