CVEvulnerability
CVE-2007-0134
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-01-09
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-94
Description
Multiple eval injection vulnerabilities in iGeneric iG Shop 1.0 allow remote attackers to execute arbitrary code via the action parameter, which is supplied to an eval function call in (1) cart.php and (2) page.php. NOTE: a later report and CVE analysis indicate that the vulnerability is present in 1.4.
Affected configurations
• igeneric ig shop 1.0
• igeneric ig shop 1.4
Related
Weakness · CWE (1)
- CWE-94 Improper Control of Generation of Code weakness
References
- http://osvdb.org/33387 osvdb.org
- http://osvdb.org/33388 osvdb.org
- http://packetstormsecurity.nl/0701-exploits/igshop10-multiple.txt Exploit
- http://secunia.com/advisories/23604 Vendor Advisory
- http://www.attrition.org/pipermail/vim/2007-June/001664.html www.attrition.org
- http://www.securityfocus.com/archive/1/456043/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/471722/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/21875 www.securityfocus.com
- http://www.vupen.com/english/advisories/2007/0056 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/31301 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/3083 www.exploit-db.com
- http://osvdb.org/33387 osvdb.org
- http://osvdb.org/33388 osvdb.org
- http://packetstormsecurity.nl/0701-exploits/igshop10-multiple.txt Exploit
- http://secunia.com/advisories/23604 Vendor Advisory
- http://www.attrition.org/pipermail/vim/2007-June/001664.html www.attrition.org
- http://www.securityfocus.com/archive/1/456043/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/471722/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/21875 www.securityfocus.com
- http://www.vupen.com/english/advisories/2007/0056 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/31301 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/3083 www.exploit-db.com