VULNERABILITY INTELLIGENCE

CVE-2008-0506

CVSS score6.8 MEDIUM
EPSS probability58.90%
CISA KEVNot currently listed
Published2008-01-31
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:P/I:P/A:P

Description

include/imageObjectIM.class.php in Coppermine Photo Gallery (CPG) before 1.4.15, when the ImageMagick picture processing method is configured, allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) quality, (2) angle, or (3) clipval parameter to picEditor.php.

Weakness classification

  • CWE-20: Improper Input Validation

Primary references