Contact Lifestream



Coppermine Sql Injection

Cdpuvbhfzz! What do you know, Coppermine was the subject of a mass hacker attack. Again. It is described in more detail here. I suppose I could be faulted for not upgrading, but honestly, I was only like a week behind on upgrades and Coppermine isn’t the sort of script where one can expect upgrades. So no reason to visit their site really.

And regardless, what can you say about a script that is the target of attacks time and time again. No matter how much they patch the script seems like a black hole of security problems.

I feel very much compelled to move to Picasa or something. In the meantime, I upgraded Coppermine and removed the version info from the footer.