CVE-2009-4220

CVE-2009-4220 affects PointComma prior to 3.8b2. A PHP remote file inclusion vulnerability in includes/classes/pctemplate.php allows an attacker to execute arbitrary PHP code by supplying a URL in the pcConfig[smartyPath] parameter. This results in remote code execution with the attack vector bei...

CVE-2009-4220: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in includes/classes/pctemplate.php in PointComma 3.8b2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the pcConfigsmartyPath parameter...