high7.5Public exploit code
CVE-2009-1226
core/admin/delete.php in Podcast Generator 1.1 and earlier does not properly restrict access to administrative functions, which allows remote attackers to dele…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Podcast Generator 1.1 - Remote Code Execution2009-03-31 · webapps · php · Verified
Impact
core/admin/delete.php in Podcast Generator 1.1 and earlier does not properly restrict access to administrative functions, which allows remote attackers to delete arbitrary files via the file parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Podcast Generator | Podcast Generator | through 1.1 Versions 0.6, 0.8, 0.9, 0.81, 0.91 |