Arbitrary Command Execution in Coppermine Photo Gallery 1.2.2b and 1.2.0 RC4

CVE-2004-1987 · HIGH Severity

AV:N/AC:L/AU:N/C:P/I:P/A:P

picmgmtbatch.inc.php in Coppermine Photo Gallery 1.2.2b and 1.2.0 RC4 allows remote attackers with administrative privileges to execute arbitrary commands via shell metacharacters in the (1) $CONFIG['impath'] or (2) $CONFIG['jpeg_qual'] parameters.

Learn more about our Web Application Penetration Testing UK.