CVE-2009-1230

Опубликовано: 02 апр. 2009

Источник: nvd

CVSS2: 6.5

EPSS Низкий

Описание

Static code injection vulnerability in index.php in Podcast Generator 1.1 and earlier allows remote authenticated administrators to inject arbitrary PHP code into config.php via the recent parameter in a config change action.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:podcast_generator:podcast_generator:*:*:*:*:*:*:*:*

Версия до 1.1 (включая)

cpe:2.3:a:podcast_generator:podcast_generator:0.6:*:*:*:*:*:*:*

cpe:2.3:a:podcast_generator:podcast_generator:0.8:*:*:*:*:*:*:*

cpe:2.3:a:podcast_generator:podcast_generator:0.9:*:*:*:*:*:*:*

cpe:2.3:a:podcast_generator:podcast_generator:0.81:*:*:*:*:*:*:*

cpe:2.3:a:podcast_generator:podcast_generator:0.91:*:*:*:*:*:*:*

cpe:2.3:a:podcast_generator:podcast_generator:0.92:*:*:*:*:*:*:*

cpe:2.3:a:podcast_generator:podcast_generator:0.93:*:*:*:*:*:*:*

cpe:2.3:a:podcast_generator:podcast_generator:0.94:*:*:*:*:*:*:*

cpe:2.3:a:podcast_generator:podcast_generator:0.95:*:*:*:*:*:*:*

cpe:2.3:a:podcast_generator:podcast_generator:0.96:*:*:*:*:*:*:*

cpe:2.3:a:podcast_generator:podcast_generator:0.96.2:*:*:*:*:*:*:*

cpe:2.3:a:podcast_generator:podcast_generator:1.0:*:*:*:*:*:*:*

cpe:2.3:a:podcast_generator:podcast_generator:1.0:beta_2:*:*:*:*:*:*

cpe:2.3:a:podcast_generator:podcast_generator:1.0_beta:*:*:*:*:*:*:*

cpe:2.3:a:podcast_generator:podcast_generator:1.0_beta2:*:*:*:*:*:*:*

cpe:2.3:a:podcast_generator:podcast_generator:1.0_beta3:*:*:*:*:*:*:*

cpe:2.3:a:podcast_generator:podcast_generator:1.0_beta4:*:*:*:*:*:*:*

cpe:2.3:a:podcast_generator:podcast_generator:1.0_beta4a:*:*:*:*:*:*:*

EPSS

Процентиль: 84%

0.02164

Низкий

6.5 Medium

CVSS2

Дефекты

CWE-94

Связанные уязвимости

GHSA-jjp4-5j58-3cr7

github

почти 4 года назад