{"vulnerability": "cve-2008-0506", "sightings": [{"uuid": "63df3e84-4e60-4319-b336-31b5ad09f919", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2008-0506", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:38.000000Z"}, {"uuid": "26ced827-edce-4c60-b4f2-16ca72669a47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2008-0506", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:08:27.000000Z"}, {"uuid": "ea891900-fb31-4cbe-b5ed-e4302cdd11f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2008-0506", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/coppermine_piceditor.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "76c7ebee-7c89-449a-8095-878ac24ae785", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2008-0506", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/16909", "content": "", "creation_timestamp": "2010-07-03T00:00:00.000000Z"}, {"uuid": "1d855492-c5bc-4703-9772-5d840ee08a64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2008-0506", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/coppermine_piceditor.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"Janek Vind\", \"jduck \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a vulnerability in the picEditor.php script of\\n          Coppermine Photo Gallery versions 1.4.14 and earlier. When configured to\\n          use the ImageMagick library, the 'quality', 'angle', and 'clipval'\\n          parameters are not properly escaped before being passed to the PHP\\n          'exec' command.\\n\\n          In order to reach the vulnerable 'exec' call, the input must pass\\n          several validation steps.\\n\\n          The vulnerabilities actually reside in the following functions:\\n\\n          image_processor.php: rotate_image(...)\\n          include/imageObjectIM.class.php: imageObject::cropImage(...)\\n          include/imageObjectIM.class.php: imageObject::rotateImage(...)\\n          include/imageObjectIM.class.php: imageObject::resizeImage(...)\\n          include/picmgmt.inc.php: resize_image(...)\\n\\n          NOTE: Use of the ImageMagick library is a non-default option. However, a\\n          user can specify its use at installation time.\", \"disclosure_date\": \"2008-01-30\", \"fullname\": \"exploit/unix/webapp/coppermine_piceditor\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:59:12 +0000\", \"name\": \"Coppermine Photo Gallery picEditor.php Command Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/unix/webapp/coppermine_piceditor.rb\", \"platform\": \"Unix\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"unix/webapp/coppermine_piceditor\", \"references\": [\"CVE-2008-0506\", \"OSVDB-41676\", \"EDB-5019\", \"URL-http://forum.coppermine-gallery.net/index.php?topic=50103.0\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Automatic\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:41.243591Z"}]}