CVE-2008-0506

include/imageObjectIM.class.php in Coppermine Photo Gallery (CPG) before 1.4.15, when the ImageMagick picture processing method is configured, allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) quality, (2) angle, or (3) clipval parameter to picEditor.php.

• CWE-20

• http://coppermine-gallery.net/forum/index.php?topic=50103.0Patch
• http://secunia.com/advisories/28682Vendor Advisory
• http://www.securityfocus.com/archive/1/487310/100/200/threaded
• http://www.securityfocus.com/bid/27512Exploit, Patch
• http://www.securitytracker.com/id?1019286
• http://www.vupen.com/english/advisories/2008/0367Vendor Advisory
• http://www.waraxe.us/advisory-65.html
• https://www.exploit-db.com/exploits/5019
• http://coppermine-gallery.net/forum/index.php?topic=50103.0Patch
• http://secunia.com/advisories/28682Vendor Advisory
• http://www.securityfocus.com/archive/1/487310/100/200/threaded
• http://www.securityfocus.com/bid/27512Exploit, Patch
• http://www.securitytracker.com/id?1019286
• http://www.vupen.com/english/advisories/2008/0367Vendor Advisory
• http://www.waraxe.us/advisory-65.html
• https://www.exploit-db.com/exploits/5019

Published

Jan 31, 2008

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-0500Multiple unspecified vulnerabilities in Mambo LaiThai 4.5.5 …
• CVE-2008-0501Directory traversal vulnerability in phpMyClub 0.0.1 allows …
• CVE-2008-0502PHP remote file inclusion vulnerability in templates/Officia…
• CVE-2008-0503Eval injection vulnerability in admin/op/disp.php in Netwerk…
• CVE-2008-0504Multiple SQL injection vulnerabilities in Coppermine Photo G…
• CVE-2008-0505Multiple cross-site scripting (XSS) vulnerabilities in docs/…
• CVE-2008-0507SQL injection vulnerability in adclick.php in the AdServe 0.…
• CVE-2008-0508Cross-site request forgery (CSRF) vulnerability in deans_per…
• CVE-2008-0509Multiple buffer overflows in IBM AIX 4.3 allow remote attack…
• CVE-2008-0510SQL injection vulnerability in index.php in the Newsletter (…
• CVE-2008-0511SQL injection vulnerability in index.php in the MaMML (com_m…
• CVE-2008-0512SQL injection vulnerability in index.php in the fq (com_fq) …