CVE-2007-1136

Published Mar 2, 2007

Last updated 14 years ago

Overview

Description: index.php in WebMplayer before 0.6.1-Alpha allows remote attackers to execute arbitrary code via shell metacharacters in an exec function call. NOTE: some sources have referred to this as eval injection in the param parameter, but CVE source inspection suggests that this is erroneous.
Source: cve@mitre.org
NVD status: Modified

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 6.8
Impact score: 6.4
Exploitability score: 8.6
Vector string: AV:N/AC:M/Au:N/C:P/I:P/A:P

Weaknesses

nvd@nist.gov: CWE-20

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:webmplayer:webmplayer:*:alpha:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "57940196-F6F9-4983-8D7E-D8290F18A978",
            "versionEndIncluding": "0.6"
          },
          {
            "criteria": "cpe:2.3:a:webmplayer:webmplayer:0.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C27ED9B7-9E53-46E5-8155-F882E3A09660"
          },
          {
            "criteria": "cpe:2.3:a:webmplayer:webmplayer:0.2.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "D54369E4-67F4-4814-9A2D-E1FC7FB27EC5"
          },
          {
            "criteria": "cpe:2.3:a:webmplayer:webmplayer:0.3:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "D92A2F4B-A2B2-40C6-849A-0902C1A9197C"
          },
          {
            "criteria": "cpe:2.3:a:webmplayer:webmplayer:0.3.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "B6C7FA40-3582-41C7-893B-C2B4B73DD330"
          },
          {
            "criteria": "cpe:2.3:a:webmplayer:webmplayer:0.3.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "50138533-B56A-4721-8A6F-CCEAF23A0CAA"
          },
          {
            "criteria": "cpe:2.3:a:webmplayer:webmplayer:0.3.3:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "0AD94E75-45F9-4750-8805-B6B282DF45D1"
          },
          {
            "criteria": "cpe:2.3:a:webmplayer:webmplayer:0.4:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "685D0AA4-1A5C-428E-B372-18C2B54B2904"
          },
          {
            "criteria": "cpe:2.3:a:webmplayer:webmplayer:0.5:alpha:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "5F873C20-B5B6-4CB4-A87C-D286D00DE8B9"
          },
          {
            "criteria": "cpe:2.3:a:webmplayer:webmplayer:0.5.1:alpha:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "8CC82B2B-7944-4577-917E-61E6E248B7FB"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Social media

Risk scores

CVSS 2.0

Weaknesses

Configurations

References