Code injection

2009-04-0215:30:00

PRIOn knowledge base

www.prio-n.com

7.4 High

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

77.5%

JSON

core/admin/delete.php in Podcast Generator 1.1 and earlier does not properly restrict access to administrative functions, which allows remote attackers to delete arbitrary files via the file parameter.

CPENameOperatorVersion
podcast_generatoreq0.96.2
podcast_generatoreq1.0 beta-2
podcast_generatoreq1.0.0-beta4-a
podcast_generatoreq0.6
podcast_generatoreq0.95
podcast_generatoreq1.0.0-beta4
podcast_generatoreq0.96
podcast_generatoreq1.0
podcast_generatoreq0.9
podcast_generatoreq0.81

Name	Operator	Version
podcast_generator	eq	0.96.2
podcast_generator	eq	1.0 beta-2
podcast_generator	eq	1.0.0-beta4-a
podcast_generator	eq	0.6
podcast_generator	eq	0.95
podcast_generator	eq	1.0.0-beta4
podcast_generator	eq	0.96
podcast_generator	eq	1.0
podcast_generator	eq	0.9
podcast_generator	eq	0.81