| Package | Affected versions | Patched versions |
|---|---|---|
| coppermine photo gallery | = 1.0_rc3= 1.1_.0= 1.1_beta_2= 1.2= 1.2.1= 1.2.2_b | |
| php-nuke | = 6.9= 7.0= 7.0_final= 7.1= 7.2 |
picmgmtbatch.inc.php in Coppermine Photo Gallery 1.2.2b and 1.2.0 RC4 allows remote attackers with administrative privileges to execute arbitrary commands via shell metacharacters in the (1) $CONFIG['impath'] or (2) $CONFIG['jpeg_qual'] parameters.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free