exploitDog

CVE-2008-0506

Опубликовано: 31 янв. 2008

Источник: nvd

CVSS2: 6.8

EPSS Средний

Описание

include/imageObjectIM.class.php in Coppermine Photo Gallery (CPG) before 1.4.15, when the ImageMagick picture processing method is configured, allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) quality, (2) angle, or (3) clipval parameter to picEditor.php.

Ссылки

http://coppermine-gallery.net/forum/index.php?topic=50103.0
Patch
http://secunia.com/advisories/28682
Vendor Advisory
http://www.securityfocus.com/archive/1/487310/100/200/threaded
http://www.securityfocus.com/bid/27512
Exploit
Patch
http://www.securitytracker.com/id?1019286
http://www.vupen.com/english/advisories/2008/0367
Vendor Advisory
http://www.waraxe.us/advisory-65.html
https://www.exploit-db.com/exploits/5019
http://coppermine-gallery.net/forum/index.php?topic=50103.0
Patch
http://secunia.com/advisories/28682
Vendor Advisory
http://www.securityfocus.com/archive/1/487310/100/200/threaded
http://www.securityfocus.com/bid/27512
Exploit
Patch
http://www.securitytracker.com/id?1019286
http://www.vupen.com/english/advisories/2008/0367
Vendor Advisory
http://www.waraxe.us/advisory-65.html
https://www.exploit-db.com/exploits/5019

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:coppermine:coppermine_photo_gallery:*:*:*:*:*:*:*:*

Версия до 1.4.14 (включая)

EPSS

Процентиль: 99%

0.58902

Средний

6.8 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

GHSA-8234-r487-52gh

github

больше 4 лет назад

include/imageObjectIM.class.php in Coppermine Photo Gallery (CPG) before 1.4.15, when the ImageMagick picture processing method is configured, allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) quality, (2) angle, or (3) clipval parameter to picEditor.php.

EPSS

Процентиль: 99%

0.58902

Средний

6.8 Medium

CVSS2

Дефекты

CWE-20