Code injection

The ewirePCDecrypt function in ewirepcfunctions.php in eWire Payment Client ePC 1.60 and 1.70 allows remote attackers to execute arbitrary commands via shell metacharacters in the paymentinfo parameter to simplePHPLinux/3paymentreceive.php...