CVE-2007-4925

CVE-2007-4925 · HIGH Severity

AV:N/AC:L/AU:N/C:P/I:P/A:P

The ewirePC_Decrypt function in ewirepcfunctions.php in eWire Payment Client (ePC) 1.60 and 1.70 allows remote attackers to execute arbitrary commands via shell metacharacters in the paymentinfo parameter to simplePHPLinux/3payment_receive.php.

Learn more about our Cis Benchmark Audit For Distribution Independent Linux.