CVE-2007-1136

index.php in WebMplayer before 0.6.1-Alpha allows remote attackers to execute arbitrary code via shell metacharacters in an exec function call. NOTE: some sources have referred to this as eval injection in the param parameter, but CVE source inspection suggests that this is erroneous.

Date published : 2007-02-27

http://www.securityfocus.com/bid/22726

http://sourceforge.net/project/shownotes.php?release_id=486880&group_id=172354