Total vulnerabilities in the database
index.php in WebMplayer before 0.6.1-Alpha allows remote attackers to execute arbitrary code via shell metacharacters in an exec function call. NOTE: some sources have referred to this as eval injection in the param parameter, but CVE source inspection suggests that this is erroneous.
| Software | From | Fixed in |
|---|---|---|
| webmplayer / webmplayer | 0.3.3 | 0.3.3.x |
| webmplayer / webmplayer | 0.3 | 0.3.x |
| webmplayer / webmplayer | 0.5-alpha | 0.5-alpha.x |
| webmplayer / webmplayer | - | 0.6.x |
| webmplayer / webmplayer | 0.2.1 | 0.2.1.x |
| webmplayer / webmplayer | 0.1 | 0.1.x |
| webmplayer / webmplayer | 0.3.1 | 0.3.1.x |
| webmplayer / webmplayer | 0.3.2 | 0.3.2.x |
| webmplayer / webmplayer | 0.5.1-alpha | 0.5.1-alpha.x |
| webmplayer / webmplayer | 0.4 | 0.4.x |