CVE-2007-1136
Last modified
CVE-2007-1136 is a vulnerability of currently unknown severity. index.php in WebMplayer before 0.6.1-Alpha allows remote attackers to execute arbitrary code via shell metacharacters in an exec function call. NOTE: some sources have referred to this as eval injection in the param parameter, but CVE source inspection suggests that this is erroneous.. EPSS estimates a 2.20% chance of exploitation in the next 30 days.
Description
index.php in WebMplayer before 0.6.1-Alpha allows remote attackers to execute arbitrary code via shell metacharacters in an exec function call. NOTE: some sources have referred to this as eval injection in the param parameter, but CVE source inspection suggests that this is erroneous.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions | Update |
|---|---|---|---|
| Webmplayer | Webmplayer | <= 0.6 | Alpha |
| Webmplayer | Webmplayer | 0.1 | — |
| Webmplayer | Webmplayer | 0.2.1 | — |
| Webmplayer | Webmplayer | 0.3 | — |
| Webmplayer | Webmplayer | 0.3.1 | — |
| Webmplayer | Webmplayer | 0.3.2 | — |
| Webmplayer | Webmplayer | 0.3.3 | — |
| Webmplayer | Webmplayer | 0.4 | — |
| Webmplayer | Webmplayer | 0.5 | Alpha |
| Webmplayer | Webmplayer | 0.5.1 | Alpha |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2007-1136?
How severe is CVE-2007-1136?
How do I fix CVE-2007-1136?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2007
- CVE-2007-1130PHP remote file inclusion vulnerability in sinagb.php in Sin…
- CVE-2007-1131PHP remote file inclusion vulnerability in sinapis.php in Si…
- CVE-2007-1132Multiple cross-site scripting (XSS) vulnerabilities in the "…
- CVE-2007-1133PHP remote file inclusion vulnerability in fcring.php in FCR…
- CVE-2007-1134Unspecified vulnerability in Watchtower (WT) before 0.12 has…
- CVE-2007-1135Multiple SQL injection vulnerabilities in WebMplayer before …
- CVE-2007-1137putmail.py in Putmail before 1.4 does not detect when a user…
- CVE-2007-1138Absolute path traversal vulnerability in list_main_pages.php…
- CVE-2007-1139Unrestricted file upload vulnerability in Cromosoft Simple P…
- CVE-2007-1140Directory traversal vulnerability in edit.php in pheap allow…
- CVE-2007-1141PHP remote file inclusion vulnerability in preview.php in Ma…
- CVE-2007-1142Cross-site scripting (XSS) vulnerability in Magic News Plus …
Are you affected by CVE-2007-1136?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST