CVE-2007-4925: Ewire Payment Client

High severity, CVSS 7.5. EPSS: 3.2% chance of exploitation in the next 30 days.

The ewirePC_Decrypt function in ewirepcfunctions.php in eWire Payment Client (ePC) 1.60 and 1.70 allows remote attackers to execute arbitrary commands via shell metacharacters in the paymentinfo parameter to simplePHPLinux/3payment_receive.php.

Affected products

• Ewire Payment Client: version 1.60 only; version 1.70 only

Published 2007-09-18. Last modified 2026-06-16.