Ampache · Ampache · CVE-2008-4796
**Name of the Vulnerable Software and Affected Versions**
Snoopy versions 1.2.3 and earlier
ampache (affected versions not specified)
libphp-snoopy (affected versions not specified)
mahara (affected versions not specified)
mediamate (affected versions not specified)
opendb (affected versions not specified)
pixelpost (affected versions not specified)
**Description**
The issue allows remote attackers to execute arbitrary commands via shell metacharacters in https URLs, specifically through the ` httpsrequest` function in Snoopy.
**Recommendations**
For Snoopy versions 1.2.3 and earlier, update to a version later than 1.2.3 to resolve the issue.
For ampache, consider disabling the ` httpsrequest` function until a patch is available.
For libphp-snoopy, restrict access to the ` httpsrequest` function to minimize the risk of exploitation.
For mahara, mediamate, opendb, and pixelpost, avoid using the ` httpsrequest` function in Snoopy until the issue is resolved.
At the moment, there is no information about a newer version that contains a fix for this vulnerability in the other affected products.