CVE-2009-4220

2009-12-07T17:30:00
ID CVE-2009-4220
Type cve
Reporter cve@mitre.org
Modified 2017-08-17T01:31:00

Description

PHP remote file inclusion vulnerability in includes/classes/pctemplate.php in PointComma 3.8b2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the pcConfig[smartyPath] parameter.