Security Advisory
CVE-2007-1136
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
index.php in WebMplayer before 0.6.1-Alpha allows remote attackers to execute arbitrary code via shell metacharacters in an exec function call. NOTE: some sources have referred to this as eval injection in the param parameter, but CVE source inspection suggests that this is erroneous.