2007-02-08 00:00:00
mitre
PUBLISHED
admin.php in Coppermine Photo Gallery 1.4.10, and possibly earlier, allows remote authenticated users to execute arbitrary shell commands via shell metacharacters (";" semicolon) in the "Command line options for ImageMagick" form field, when used as an option to ImageMagicks convert command. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.