CVE-2007-0134

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 11.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2007-01-09 · updated 2026-06-16
Weakness: CWE-94

Description

Multiple eval injection vulnerabilities in iGeneric iG Shop 1.0 allow remote attackers to execute arbitrary code via the action parameter, which is supplied to an eval function call in (1) cart.php and (2) page.php. NOTE: a later report and CVE analysis indicate that the vulnerability is present in 1.4.

Affected products

Igeneric Ig Shop: 1.0, 1.4

References

http://osvdb.org/33387
http://osvdb.org/33388
http://packetstormsecurity.nl/0701-exploits/igshop10-multiple.txt
http://secunia.com/advisories/23604
http://www.attrition.org/pipermail/vim/2007-June/001664.html
http://www.securityfocus.com/archive/1/456043/100/0/threaded
http://www.securityfocus.com/archive/1/471722/100/0/threaded
http://www.securityfocus.com/bid/21875
http://www.vupen.com/english/advisories/2007/0056
https://exchange.xforce.ibmcloud.com/vulnerabilities/31301
https://www.exploit-db.com/exploits/3083
http://osvdb.org/33387

Get alerted when CVE-2007-0134 or the next vulnerability affects your stack