high7.5Public exploit code
CVE-2009-4836
Eval injection vulnerability in system/services/init.php in Movie PHP Script 2.0 allows remote attackers to execute arbitrary PHP code via the anticode paramet…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Movie PHP Script 2.0 - 'init.php?anticode' Code Execution2009-06-03 · webapps · php · Verified
Impact
Eval injection vulnerability in system/services/init.php in Movie PHP Script 2.0 allows remote attackers to execute arbitrary PHP code via the anticode parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Moviephp | Movie Php Script | Version 2.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/54883
- http://secunia.com/advisories/35283
- http://www.exploit-db.com/exploits/8871
- http://www.vupen.com/english/advisories/2009/1495
- http://osvdb.org/54883
- http://secunia.com/advisories/35283
- http://www.exploit-db.com/exploits/8871
- http://www.vupen.com/english/advisories/2009/1495