| Package | Affected versions | Patched versions |
|---|---|---|
| payment client | = 1.60= 1.70 |
The ewirePC_Decrypt function in ewirepcfunctions.php in eWire Payment Client (ePC) 1.60 and 1.70 allows remote attackers to execute arbitrary commands via shell metacharacters in the paymentinfo parameter to simplePHPLinux/3payment_receive.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free