Description
admin.php in Coppermine Photo Gallery 1.4.10, and possibly earlier, allows remote authenticated users to execute arbitrary shell commands via shell metacharacters (";" semicolon) in the "Command line options for ImageMagick" form field, when used as an option to ImageMagick's convert command. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.
References
- 24019 third-party-advisory
- 22406 vdb-entry
- coppermine-admin-command-execution(32236) vdb-entry
- 33093 vdb-entry