CVE-2004-2538

CVE-2004-2538 affects phpCodeGenie’s PCG simple application generation; versions before 3.0.2 are vulnerable. A direct static code injection flaw in the generated code path allows remote authenticated users to execute arbitrary code via the (1) header or (2) footer. Exploitation details or in-the...