CVE-2007-0835: Coppermine Photo Gallery

Medium severity, CVSS 6.5. EPSS: 1.5% chance of exploitation in the next 30 days.

admin.php in Coppermine Photo Gallery 1.4.10, and possibly earlier, allows remote authenticated users to execute arbitrary shell commands via shell metacharacters (";" semicolon) in the "Command line options for ImageMagick" form field, when used as an option to ImageMagick's convert command. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.

Affected products

• Coppermine Coppermine Photo Gallery: up to and including 1.4.10

Published 2007-02-08. Last modified 2026-06-16.