medium6.8
CVE-2009-2353
encoder.php in eAccelerator allows remote attackers to execute arbitrary code by copying a local executable file to a location under the web root via the -o op…
Impact
encoder.php in eAccelerator allows remote attackers to execute arbitrary code by copying a local executable file to a location under the web root via the -o option, and then making a direct request to this file, related to upload of image files.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Eaccelerator | Eaccelerator | Versions 0.9.4, 0.9.5, 0.9.5.1, 0.9.5.2, 0.9.5.3 |