CVE-2007-0134

Description

Multiple eval injection vulnerabilities in iGeneric iG Shop 1.0 allow remote attackers to execute arbitrary code via the action parameter, which is supplied to an eval function call in (1) cart.php and (2) page.php. NOTE: a later report and CVE analysis indicate that the vulnerability is present in 1.4.

References

https://www.exploit-db.com/exploits/3083

https://exchange.xforce.ibmcloud.com/vulnerabilities/31301

http://www.vupen.com/english/advisories/2007/0056

http://www.securityfocus.com/bid/21875

http://www.securityfocus.com/archive/1/471722/100/0/threaded

http://www.securityfocus.com/archive/1/456043/100/0/threaded

http://www.attrition.org/pipermail/vim/2007-June/001664.html

http://secunia.com/advisories/23604

http://osvdb.org/33388

http://osvdb.org/33387

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS