CVE-2008-0506 EXPLOIT
6.8
MEDIUM · CVSS 2.0 · EPSS 58.9% (pctl 99)
Patch early
A public exploit exists.
Description
include/imageObjectIM.class.php in Coppermine Photo Gallery (CPG) before 1.4.15, when the ImageMagick picture processing method is configured, allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) quality, (2) angle, or (3) clipval parameter to picEditor.php.
Scoring
| CVSS | 6.8 (MEDIUM, v2.0) |
|---|---|
| Vector | AV:N/AC:M/Au:N/C:P/I:P/A:P |
| EPSS | 58.9% — more likely to be exploited than 99% of all CVEs |
| Weakness | CWE-20 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2008-01-31 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| coppermine | coppermine photo gallery |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Coppermine Photo Gallery 1.4.14 - 'picEditor.php' Command Execution (Metasploit) | 2010-07-03 |
References
- http://coppermine-gallery.net/forum/index.php?topic=50103.0
- http://secunia.com/advisories/28682
- http://www.securityfocus.com/archive/1/487310/100/200/threaded
- http://www.securityfocus.com/bid/27512
- http://www.securitytracker.com/id?1019286
- http://www.vupen.com/english/advisories/2008/0367
- http://www.waraxe.us/advisory-65.html
- https://www.exploit-db.com/exploits/5019
- http://coppermine-gallery.net/forum/index.php?topic=50103.0
- http://secunia.com/advisories/28682
- http://www.securityfocus.com/archive/1/487310/100/200/threaded
- http://www.securityfocus.com/bid/27512
- http://www.securitytracker.com/id?1019286
- http://www.vupen.com/english/advisories/2008/0367
- http://www.waraxe.us/advisory-65.html
- https://www.exploit-db.com/exploits/5019
→ the Explorer · watch your stack · NVD