VULNERABILITY INTELLIGENCE
CVE-2008-7125
CVSS score9 HIGH
EPSS probability2.24%
CISA KEVNot currently listed
Published2009-08-31
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:S/C:C/I:C/A:C
Description
pphoto in Ariadne before 2.6 allows remote authenticated users with certain privileges to execute arbitrary shell commands via vectors related to PINP programs and the annotate command. NOTE: some of these details are obtained from third party information.
Weakness classification
- CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')