CVE-2009-1226

core/admin/delete.php in Podcast Generator 1.1 and earlier does not properly restrict access to administrative functions, which allows remote attackers to delete arbitrary files via the file parameter.

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

2.35% chance of exploitation in the next 30 days, 82th percentile

Published

2009-04-02

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/8324

References

• CVE Record
• NVD entry

Related

• CVE-2009-1225
• CVE-2009-1227
• CVE-2009-1224
• CVE-2009-1228
• CVE-2009-1222
• CVE-2009-1229