CVE-2008-0506: Input Validation
First published: Thu Jan 31 2008(Updated: )
include/imageObjectIM.class.php in Coppermine Photo Gallery (CPG) before 1.4.15, when the ImageMagick picture processing method is configured, allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) quality, (2) angle, or (3) clipval parameter to picEditor.php.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Coppermine Photo Gallery | <=1.4.14 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://coppermine-gallery.net/forum/index.php?topic=50103.0
- http://www.securityfocus.com/bid/27512
- http://secunia.com/advisories/28682
- http://www.waraxe.us/advisory-65.html
- http://www.securitytracker.com/id?1019286
- http://www.vupen.com/english/advisories/2008/0367
- https://www.exploit-db.com/exploits/5019
- http://www.securityfocus.com/archive/1/487310/100/200/threaded
Frequently Asked Questions
What is the severity of CVE-2008-0506?
CVE-2008-0506 is classified as a significant security vulnerability that allows remote code execution.
How do I fix CVE-2008-0506?
To fix CVE-2008-0506, upgrade your Coppermine Photo Gallery to version 1.4.15 or later.
What are the affected software versions of CVE-2008-0506?
CVE-2008-0506 affects Coppermine Photo Gallery versions prior to 1.4.15.
What parameters are exploited in CVE-2008-0506?
CVE-2008-0506 can be exploited through shell metacharacters in the quality, angle, or clipval parameters.
What type of attack does CVE-2008-0506 enable?
CVE-2008-0506 enables remote attackers to execute arbitrary commands on the affected system.
- agent/references
- agent/type
- agent/remedy
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/last-modified-date
- agent/weakness
- agent/author
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/coppermine
- canonical/coppermine photo gallery
- version/coppermine photo gallery/1.4.14