CVE-2007-4925

2007-09-1818:00:00

mitre

www.cve.org

AI Score

7.7

Confidence

High

EPSS

0.043

Percentile

92.5%

JSON

The ewirePC_Decrypt function in ewirepcfunctions.php in eWire Payment Client (ePC) 1.60 and 1.70 allows remote attackers to execute arbitrary commands via shell metacharacters in the paymentinfo parameter to simplePHPLinux/3payment_receive.php.

References

osvdb.org/40523

secunia.com/advisories/26780

www.fortconsult.net/images/pdf/advisory_feb2007.pdf

www.securityfocus.com/bid/25683

www.vupen.com/english/advisories/2007/3183