CVEvulnerability

CVE-2007-0835

6.5 MEDIUM Published 2007-02-08 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2007-02-08
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P

Description

admin.php in Coppermine Photo Gallery 1.4.10, and possibly earlier, allows remote authenticated users to execute arbitrary shell commands via shell metacharacters (";" semicolon) in the "Command line options for ImageMagick" form field, when used as an option to ImageMagick's convert command. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.

Affected configurations

• coppermine coppermine photo gallery (<= 1.4.10)

References