VULNERABILITY INTELLIGENCE

CVE-2007-0134

CVSS score7.5 HIGH
EPSS probability11.70%
CISA KEVNot currently listed
Published2007-01-09
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P

Description

Multiple eval injection vulnerabilities in iGeneric iG Shop 1.0 allow remote attackers to execute arbitrary code via the action parameter, which is supplied to an eval function call in (1) cart.php and (2) page.php. NOTE: a later report and CVE analysis indicate that the vulnerability is present in 1.4.

Weakness classification

  • CWE-94: Improper Control of Generation of Code ('Code Injection')

Primary references