CVE-2007-1136

CVE-2007-1136 · MEDIUM Severity

AV:N/AC:M/AU:N/C:P/I:P/A:P

index.php in WebMplayer before 0.6.1-Alpha allows remote attackers to execute arbitrary code via shell metacharacters in an exec function call. NOTE: some sources have referred to this as eval injection in the param parameter, but CVE source inspection suggests that this is erroneous.

Learn more about our Web App Pen Testing.