← Database

CVE-2008-0506

MEDIUM CVSS: 6.8 Published: 2008-01-31 Modified: 2026-06-16

Description

include/imageObjectIM.class.php in Coppermine Photo Gallery (CPG) before 1.4.15, when the ImageMagick picture processing method is configured, allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) quality, (2) angle, or (3) clipval parameter to picEditor.php.

Affected Platforms

Coppermine Coppermine Photo Gallery

Weakness Type

CWE-20

References