Coppermine Photo Gallery 1.4.14 - 'picEditor.php' Command Execution (Metasploit)

$Id: copperminepiceditor.rb 9671 2010-07-03 06:21:31Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

CVE-2008-0506

creationtimestamp| type| source ---|---|--- 2010-07-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16909 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/copperminepiceditor.rb 2025-02-06 03:13:38+00:00|...

SLES9: Security update for ethereal

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: ethereal For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5019431 within the Su...

SLES9: Security update for ethereal

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: ethereal For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5019431 within the Su...

CVE-2009-0506

CVE-2009-0506 affects IBM WebSphere Application Server 5.1 and 6.0.2 before 6.0.2.33 on z/OS when CSIv2 Identity Assertion is enabled and EJB interaction occurs between a WAS 6.1 instance and a pre-6.1 instance. The vulnerability allows local users to cause an unknown impact via two vectors: (1) ...

tzdata security update

CentOS Errata and Security Advisory CESA-2008:0506-05 Merged security bulletin from advisories: https://lists.centos.org/pipermail/centos-announce/2008-May/077104.html Affected packages: tzdata...

CVE-2008-0506

include/imageObjectIM.class.php in Coppermine Photo Gallery CPG before 1.4.15, when the ImageMagick picture processing method is configured, allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 quality, 2 angle, or 3 clipval parameter to picEditor.php...

Immunity Canvas: COPPERMINE

Name| coppermine ---|--- CVE| CVE-2008-0506 Exploit Pack| CANVAS Description| coppermine Notes| CVE Name: CVE-2008-0506 VENDOR: Coppermine URL: http://www.milw0rm.com/exploits/5019 Repeatability: Infinite CVE Url: https://vulners.com/cve/CVE-2008-0506 CVSS: 6.8...

CVE-2008-0506

include/imageObjectIM.class.php in Coppermine Photo Gallery CPG before 1.4.15, when the ImageMagick picture processing method is configured, allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 quality, 2 angle, or 3 clipval parameter to picEditor.php...

CVE-2008-0506

CVE-2008-0506 affects Coppermine Photo Gallery (CPG) implemention, specifically picEditor.php when using ImageMagick. The vulnerability arises because the (quality, angle, clipval) parameters are not properly escaped before passing to PHP exec, allowing remote command execution via shell metachar...

Fedora 7 : tog-pegasus-2.6.0-3.fc7 (2008-0506)

Thu Jan 10 2008 Vitezslav Crhonek - 2.6.0-3 - Fix PAM authentication buffer overflow CVE-2008-0003 Resolves: 427828 - Wed Mar 28 2007 Vitezslav Crhonek - 2.6.0-2 - Update changelog - Build with Open Pegasus' Makefiles, istall with RedHats Mark Hamzy Note that Tenable Network Security has...

CVE-2007-0506

The CVE-2007-0506 entry concerns Drupal’s Project issue tracking module (versions 4.7.0–5.x before 20070123). The vulnerability allows remote authenticated users to bypass other access control modules and access attached files by guessing filenames, and to retrieve issue information through direc...

CVE-2006-0506

CVE-2006-0506 is an XSS vulnerability in Nuked-klaN 1.7, exploitable via the letter parameter in index.php. The issue arises from insufficient input sanitization, allowing remote attackers to inject arbitrary script or HTML. The entry is corroborated by multiple sources (NVD records and CVE listi...

CVE-2006-0506

Cross-site scripting XSS vulnerability in index.php in Nuked-klaN 1.7 allows remote attackers to inject arbitrary web script or HTML via the letter parameter...

CVE-2004-0506

The SPNEGO dissector in Ethereal 0.9.8 to 0.10.3 allows remote attackers to cause a denial of service crash via unknown attack vectors that cause a null pointer dereference...

CVE-2004-0506

The CVE-2004-0506 entry concerns Ethereal (0.9.8–0.10.3) where the SPNEGO dissector could dereference NULL, triggering a remote crash/denial of service. The vulnerability is network-exploitable with no authentication and partial availability impact (CVSS v2 base 5.0). Affected advisories (Gentoo ...

CVE-2003-0506

Microsoft NetMeeting 3.01 2000 before SP4 allows remote attackers to cause a denial of service shutdown of NetMeeting conference via malformed packets, as demonstrated via the chat conversation...

CVE-2003-0506

Microsoft NetMeeting 3.01 2000 before SP4 allows remote attackers to cause a denial of service shutdown of NetMeeting conference via malformed packets, as demonstrated via the chat conversation...

CVE-2003-0506

Microsoft NetMeeting 3.01 2000 before SP4 is affected by a remote DoS vulnerability triggered by malformed packets (demonstrated via chat), per CVE-2003-0506. The affected component is NetMeeting’s chat/packet handling; impact is shutdown of a conference. The connected records do not specify a ve...

CVE-2002-0506

The CVE-2002-0506 entry concerns the libnewt (newt windowing library) component, specifically the newt.c file. A buffer overflow in libnewt 0.50.33 and earlier may allow a local attacker to cause a denial of service or execute arbitrary code in setuid programs that use libnewt. The available conn...