CVE-2009-4666

Multiple PHP remote file inclusion vulnerabilities in Webradev Download Protect 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[RootPath] parameter to (1) Framework/EmailTemplates.class.php, (2) Customers/PDPEmailReplaceConstants.class.php, and (3) Admin/ResellersManager.class.php in includes/DProtect/.
References
Configurations

Configuration 1 (hide)

cpe:2.3:a:qualityunit:download_protect:1.0:*:*:*:*:*:*:*

History

No history.

Information

Published : 2010-03-05 18:30

Updated : 2024-02-28 11:41


NVD link : CVE-2009-4666

Mitre link : CVE-2009-4666

CVE.ORG link : CVE-2009-4666


JSON object : View

Products Affected

qualityunit

  • download_protect
CWE
CWE-94

Improper Control of Generation of Code ('Code Injection')