CVE-2009-4854

CVE-2009-4854 affects TalkBack 2.3.14: addons/import.php accepts a result parameter that enables remote command execution. This is a server-side input handling flaw in the import routine (component/file: addons/import.php) that permits arbitrary commands to be executed by an attacker. The CVSS-de...