PRIOn knowledge basePRION:CVE-2007-1136Code injection
8.4 High
AI Score
Confidence
Low
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.06 Low
EPSS
Percentile
93.3%
index.php in WebMplayer before 0.6.1-Alpha allows remote attackers to execute arbitrary code via shell metacharacters in an exec function call. NOTE: some sources have referred to this as eval injection in the param parameter, but CVE source inspection suggests that this is erroneous.
| CPE | Name | Operator | Version |
|---|---|---|---|
| webmplayer | eq | 0.3.3 | |
| webmplayer | eq | 0.3 | |
| webmplayer | eq | 0.5 alpha | |
| webmplayer | le | 0.6 | |
| webmplayer | eq | 0.2.1 | |
| webmplayer | eq | 0.1 | |
| webmplayer | eq | 0.3.1 | |
| webmplayer | eq | 0.3.2 | |
| webmplayer | eq | 0.5.1 alpha | |
| webmplayer | eq | 0.4 |
8.4 High
AI Score
Confidence
Low
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.06 Low
EPSS
Percentile
93.3%