Coppermine gallery before 1.4.26 has an input validation vulnerability that allows for code execution.