CVE-2004-1987 in Photo Gallery

Riassunto

di MITRE

picmgmtbatch.inc.php in Coppermine Photo Gallery 1.2.2b and 1.2.0 RC4 allows remote attackers with administrative privileges to execute arbitrary commands via shell metacharacters in the (1) $CONFIG[ impath ] or (2) $CONFIG[ jpeg_qual ] parameters.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Prenotare: 04/05/2005
• Divulgazione: 30/04/2004
• Moderazione: accettato
• Voce: VDB-21806
• CPE: pronto
• CWE: CWE-269 (confermato)
• CVSS: 7.3 (VulDB)
• EPSS: 0.10196
• KEV: no
• Attività: molto basso
• Settore: Agriculture, Lawfirm, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2004-1987
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2004-1987
• CVE Details: https://www.cvedetails.com/cve/CVE-2004-1987/