CVE-2008-0506: Input Validation
include/imageObjectIM.class.php in Coppermine Photo Gallery (CPG) before 1.4.15, when the ImageMagick picture processing method is configured, allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) quality, (2) angle, or (3) clipval parameter to picEditor.php.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2008-0506?
CVE-2008-0506 is classified as a significant security vulnerability that allows remote code execution.
How do I fix CVE-2008-0506?
To fix CVE-2008-0506, upgrade your Coppermine Photo Gallery to version 1.4.15 or later.
What are the affected software versions of CVE-2008-0506?
CVE-2008-0506 affects Coppermine Photo Gallery versions prior to 1.4.15.
What parameters are exploited in CVE-2008-0506?
CVE-2008-0506 can be exploited through shell metacharacters in the quality, angle, or clipval parameters.
What type of attack does CVE-2008-0506 enable?
CVE-2008-0506 enables remote attackers to execute arbitrary commands on the affected system.