CVE-2009-1230
Severity CVSS v4.0:
Pending analysis
Type:
CWE-94
Code Injection
Publication date:
02/04/2009
Last modified:
09/04/2025
Description
Static code injection vulnerability in index.php in Podcast Generator 1.1 and earlier allows remote authenticated administrators to inject arbitrary PHP code into config.php via the recent parameter in a config change action.
Impact
Base Score 2.0
6.50
Severity 2.0
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:a:podcast_generator:podcast_generator:*:*:*:*:*:*:*:* | 1.1 (including) | |
| cpe:2.3:a:podcast_generator:podcast_generator:0.6:*:*:*:*:*:*:* | ||
| cpe:2.3:a:podcast_generator:podcast_generator:0.8:*:*:*:*:*:*:* | ||
| cpe:2.3:a:podcast_generator:podcast_generator:0.9:*:*:*:*:*:*:* | ||
| cpe:2.3:a:podcast_generator:podcast_generator:0.81:*:*:*:*:*:*:* | ||
| cpe:2.3:a:podcast_generator:podcast_generator:0.91:*:*:*:*:*:*:* | ||
| cpe:2.3:a:podcast_generator:podcast_generator:0.92:*:*:*:*:*:*:* | ||
| cpe:2.3:a:podcast_generator:podcast_generator:0.93:*:*:*:*:*:*:* | ||
| cpe:2.3:a:podcast_generator:podcast_generator:0.94:*:*:*:*:*:*:* | ||
| cpe:2.3:a:podcast_generator:podcast_generator:0.95:*:*:*:*:*:*:* | ||
| cpe:2.3:a:podcast_generator:podcast_generator:0.96:*:*:*:*:*:*:* | ||
| cpe:2.3:a:podcast_generator:podcast_generator:0.96.2:*:*:*:*:*:*:* | ||
| cpe:2.3:a:podcast_generator:podcast_generator:1.0:*:*:*:*:*:*:* | ||
| cpe:2.3:a:podcast_generator:podcast_generator:1.0:beta_2:*:*:*:*:*:* | ||
| cpe:2.3:a:podcast_generator:podcast_generator:1.0_beta:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page