CVEvulnerability
CVE-2008-0506
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-01-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-20
Description
include/imageObjectIM.class.php in Coppermine Photo Gallery (CPG) before 1.4.15, when the ImageMagick picture processing method is configured, allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) quality, (2) angle, or (3) clipval parameter to picEditor.php.
Affected configurations
• coppermine coppermine photo gallery (<= 1.4.14)
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://coppermine-gallery.net/forum/index.php?topic=50103.0 Patch
- http://secunia.com/advisories/28682 Vendor Advisory
- http://www.securityfocus.com/archive/1/487310/100/200/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/27512 Exploit, Patch
- http://www.securitytracker.com/id?1019286 www.securitytracker.com
- http://www.vupen.com/english/advisories/2008/0367 Vendor Advisory
- http://www.waraxe.us/advisory-65.html www.waraxe.us
- https://www.exploit-db.com/exploits/5019 www.exploit-db.com
- http://coppermine-gallery.net/forum/index.php?topic=50103.0 Patch
- http://secunia.com/advisories/28682 Vendor Advisory
- http://www.securityfocus.com/archive/1/487310/100/200/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/27512 Exploit, Patch
- http://www.securitytracker.com/id?1019286 www.securitytracker.com
- http://www.vupen.com/english/advisories/2008/0367 Vendor Advisory
- http://www.waraxe.us/advisory-65.html www.waraxe.us
- https://www.exploit-db.com/exploits/5019 www.exploit-db.com