NuytsTech Security

CVE-2008-0506

by ·

include/imageObjectIM.class.php in Coppermine Photo Gallery (CPG) before 1.4.15, when the ImageMagick picture processing method is configured, allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) quality, (2) angle, or (3) clipval parameter to picEditor.php.

Date published : 2008-01-31

http://www.securityfocus.com/bid/27512

http://www.securityfocus.com/archive/1/487310/100/200/threaded

Tags: