CVE Database
/

CVE-2009-1226

Back to search

CVE-2009-1226

Published: Apr 2, 2009

Modified: Aug 7, 2024

PUBLISHED

Description

core/admin/delete.php in Podcast Generator 1.1 and earlier does not properly restrict access to administrative functions, which allows remote attackers to delete arbitrary files via the file parameter.

VendorProductVersions

n/a

n/a

affected
n/a

References

34317
vdb-entry
x_refsource_BID
34555
third-party-advisory
x_refsource_SECUNIA
8324
exploit
x_refsource_EXPLOIT-DB

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now