CVE-2009-4854 - addons/import.php in TalkBack 2.3.14 allows remote attackers to execute arbitrary commands via the result parameter

HIGH

addons/import.php in TalkBack 2.3.14 allows remote attackers to execute arbitrary commands via the result parameter

Published May 7, 2010

7.5

HIGH

CVSS 2.0

EPSS 3.12%

addons/import.php in TalkBack 2.3.14 allows remote attackers to execute arbitrary commands via the result parameter.

No remediation recorded yet.

Weaknesses (1)

CWE-20

Improper Input Validation

Link	Providers	Tags
http://www.exploit-db.com/exploits/9095		exploitx_refsource_EXPLOIT-DB
http://www.juniper.net/security/auto/vulnerabilities/vuln35619.html		x_refsource_MISC
http://www.packetstormsecurity.org/0907-exploits/talkback-lfiexec.txt		x_refsource_MISCExploit
http://www.securityfocus.com/bid/35619		vdb-entryx_refsource_BIDExploit
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-4817		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/58705		vdb-entryx_refsource_XF