Vulnerabilities > CVE-2004-1987
Attack vector
UNKNOWN Attack complexity
UNKNOWN Privileges required
UNKNOWN Confidentiality impact
UNKNOWN Integrity impact
UNKNOWN Availability impact
UNKNOWN Summary
picmgmtbatch.inc.php in Coppermine Photo Gallery 1.2.2b and 1.2.0 RC4 allows remote attackers with administrative privileges to execute arbitrary commands via shell metacharacters in the (1) $CONFIG['impath'] or (2) $CONFIG['jpeg_qual'] parameters.
Vulnerable Configurations
Part | Description | Count |
---|---|---|
Application | 6 | |
Application | 5 |
References
- http://marc.info/?l=bugtraq&m=108360247732014&w=2
- http://marc.info/?l=bugtraq&m=108360247732014&w=2
- http://secunia.com/advisories/11524
- http://secunia.com/advisories/11524
- http://securitytracker.com/id?1010001
- http://securitytracker.com/id?1010001
- http://www.osvdb.org/5759
- http://www.osvdb.org/5759
- http://www.securityfocus.com/bid/10253
- http://www.securityfocus.com/bid/10253
- http://www.waraxe.us/index.php?modname=sa&id=26
- http://www.waraxe.us/index.php?modname=sa&id=26
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16043
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16043