« Volver al listado

CVE-2007-1136

Estado: ModificadaMedia (6.8)—

index.php in WebMplayer before 0.6.1-Alpha allows remote attackers to execute arbitrary code via shell metacharacters in an exec function call. NOTE: some sources have referred to this as eval injection in the param parameter, but CVE source inspection suggests that this is erroneous.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Webmplayer — Webmplayer

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2007-1136",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6.8,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": true,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2007-03-02T21:18:00.000",
  "references": [
    {
      "url": "http://attrition.org/pipermail/vim/2007-February/001399.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/34441",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://sourceforge.net/project/shownotes.php?release_id=486880&group_id=172354",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/22726",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2007/0742",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://attrition.org/pipermail/vim/2007-February/001399.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://osvdb.org/34441",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://sourceforge.net/project/shownotes.php?release_id=486880&group_id=172354",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/22726",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2007/0742",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "index.php in WebMplayer before 0.6.1-Alpha allows remote attackers to execute arbitrary code via shell metacharacters in an exec function call.  NOTE: some sources have referred to this as eval injection in the param parameter, but CVE source inspection suggests that this is erroneous."
    },
    {
      "lang": "es",
      "value": "index.php en el WebMplayer anterior al 0.6.1-Alpha  permite a atacantes remotos ejecutar código de su elección mediante metacaracteres del shell en la función ejecutable call. NOTA: algunas fuentes se han referido a esta vulnerabilidad como una inyección eval en el parámetro param, pero la fuente de inspección del CVE sugieren que esto es erróneo."
    }
  ],
  "lastModified": "2026-06-16T22:37:01.050",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:webmplayer:webmplayer:*:alpha:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "57940196-F6F9-4983-8D7E-D8290F18A978",
              "versionEndIncluding": "0.6"
            },
            {
              "criteria": "cpe:2.3:a:webmplayer:webmplayer:0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C27ED9B7-9E53-46E5-8155-F882E3A09660"
            },
            {
              "criteria": "cpe:2.3:a:webmplayer:webmplayer:0.2.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D54369E4-67F4-4814-9A2D-E1FC7FB27EC5"
            },
            {
              "criteria": "cpe:2.3:a:webmplayer:webmplayer:0.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D92A2F4B-A2B2-40C6-849A-0902C1A9197C"
            },
            {
              "criteria": "cpe:2.3:a:webmplayer:webmplayer:0.3.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B6C7FA40-3582-41C7-893B-C2B4B73DD330"
            },
            {
              "criteria": "cpe:2.3:a:webmplayer:webmplayer:0.3.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "50138533-B56A-4721-8A6F-CCEAF23A0CAA"
            },
            {
              "criteria": "cpe:2.3:a:webmplayer:webmplayer:0.3.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0AD94E75-45F9-4750-8805-B6B282DF45D1"
            },
            {
              "criteria": "cpe:2.3:a:webmplayer:webmplayer:0.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "685D0AA4-1A5C-428E-B372-18C2B54B2904"
            },
            {
              "criteria": "cpe:2.3:a:webmplayer:webmplayer:0.5:alpha:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5F873C20-B5B6-4CB4-A87C-D286D00DE8B9"
            },
            {
              "criteria": "cpe:2.3:a:webmplayer:webmplayer:0.5.1:alpha:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8CC82B2B-7944-4577-917E-61E6E248B7FB"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}