CVE:CVE-2007-4925
CNNVD:CNNVD-200709-229
eWire Payment Client (ePC)中的ewirepcfunctions.php的ewirePC_Decrypt函数使远程攻击者可以借助simplePHPLinux/3payment_receive.php的paymentinfo参数的shell字符执行任意指令。
solution:Upgrade ewire payment_client to a higher version than 1.60,1.70,and avoid the version 1.60,1.70