Remote Command Execution Vulnerability in Coppermine Photo Gallery
CVE-2008-0506

Currently unrated

Key Information:

Vendor

Coppermine

Status
Coppermine Photo Gallery
Vendor
CVE Published:
31 January 2008

What is CVE-2008-0506?

A vulnerability in Coppermine Photo Gallery prior to version 1.4.15 allows remote attackers to execute arbitrary commands on the server. This issue arises when the ImageMagick picture processing method is used, permitting attackers to exploit shell metacharacters in specific parameters such as quality, angle, or clipval via picEditor.php.

References

http://www.waraxe.us/advisory-65.html
x_refsource_MISC
http://coppermine-gallery.net/forum/index.php?topic=50103.0
x_refsource_CONFIRM
http://www.vupen.com/english/advisories/2008/0367
vdb-entryx_refsource_VUPEN

EPSS Score

88% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2008-0506 : Remote Command Execution Vulnerability in Coppermine Photo Gallery