CVE-2008-0506

MEDIUM 6.8CVE-2008-0506 · Published 31/01/2008 · updated 16/06/2026

Package	Affected versions	Patched versions
coppermine photo gallery coppermine	`≤ 1.4.14`	No fix yet

Description

include/imageObjectIM.class.php in Coppermine Photo Gallery (CPG) before 1.4.15, when the ImageMagick picture processing method is configured, allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) quality, (2) angle, or (3) clipval parameter to picEditor.php.

References

coppermine-gallery.net/forum/index.php · Patch
secunia.com/advisories/28682 · Vendor Advisory
securityfocus.com/archive/1/487310/100/200/threaded
securityfocus.com/bid/27512 · Exploit
securitytracker.com/id
vupen.com/english/advisories/2008/0367 · Vendor Advisory
waraxe.us/advisory-65.html
exploit-db.com/exploits/5019

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free