CVE:CVE-2008-0506
CNNVD:CNNVD-200801-475
1.4.15版本之前的Coppermine Photo Gallery (CPG)中的include/imageObjectIM.class.php在ImageMagick图像处理程序设置后，远程攻击者可以通过picEditor.php中的(1) quality, (2)angle或 (3) clipval参数中的shell字符到达来执行任意命令。
solution:Upgrade coppermine coppermine_photo_gallery to a higher version than 1.4.14,and avoid the version (,1.4.14]