CVE-2009-1226 - core/admin/delete.php in Podcast Generator 1.1 and earlier does not properly restrict access to administrative functions, which allows remote attackers to delete arbitrary files via the file parameter

Back Back to CVE browser

HIGH

core/admin/delete.php in Podcast Generator 1.1 and earlier does not properly restrict access to administrative functions, which allows remote attackers to delete arbitrary files via the file parameter

Published Apr 2, 2009

7.5

HIGH

CVSS 2.0

EPSS 2.35%

Description

core/admin/delete.php in Podcast Generator 1.1 and earlier does not properly restrict access to administrative functions, which allows remote attackers to delete arbitrary files via the file parameter.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-264

References (3)

http://secunia.com/advisories/34555
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.securityfocus.com/bid/34317
vdb-entryx_refsource_BIDExploit
https://www.exploit-db.com/exploits/8324
exploitx_refsource_EXPLOIT-DB

Link	Providers	Tags
http://secunia.com/advisories/34555		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.securityfocus.com/bid/34317		vdb-entryx_refsource_BIDExploit
https://www.exploit-db.com/exploits/8324		exploitx_refsource_EXPLOIT-DB

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Apr 2, 2009

Updated Aug 7, 2024

Reserved Apr 2, 2009

Link CVE-2009-1226

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2009-1226

Red Hat

Severity n/a

Public date n/a

Links CVE-2009-1226