CVE-2009-4854

CVE-2009-4854 affects TalkBack 2.3.14: addons/import.php accepts a result parameter that enables remote command execution. This is a server-side input handling flaw in the import routine (component/file: addons/import.php) that permits arbitrary commands to be executed by an attacker. The CVSS-de...

CVE-2009-4854

addons/import.php in TalkBack 2.3.14 allows remote attackers to execute arbitrary commands via the result parameter...

CVE-2009-4854

creationtimestamp| type| source ---|---|--- 2009-07-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9095...