Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4ch9-hmx5-52hv

Опубликовано: 01 мая 2022
Источник: github
Github: Не прошло ревью

Описание

The ewirePC_Decrypt function in ewirepcfunctions.php in eWire Payment Client (ePC) 1.60 and 1.70 allows remote attackers to execute arbitrary commands via shell metacharacters in the paymentinfo parameter to simplePHPLinux/3payment_receive.php.

The ewirePC_Decrypt function in ewirepcfunctions.php in eWire Payment Client (ePC) 1.60 and 1.70 allows remote attackers to execute arbitrary commands via shell metacharacters in the paymentinfo parameter to simplePHPLinux/3payment_receive.php.

EPSS

Процентиль: 87%
0.03289
Низкий

Дефекты

CWE-20

Связанные уязвимости

nvd
больше 18 лет назад

The ewirePC_Decrypt function in ewirepcfunctions.php in eWire Payment Client (ePC) 1.60 and 1.70 allows remote attackers to execute arbitrary commands via shell metacharacters in the paymentinfo parameter to simplePHPLinux/3payment_receive.php.

EPSS

Процентиль: 87%
0.03289
Низкий

Дефекты

CWE-20