CVE-2009-4220

ALTO 7.5CVE-2009-4220 · Published 07/12/2009 · updated 16/06/2026

In breve

CVE-2009-4220 è una vulnerabilità ALTO (CVSS 7.5) che riguarda pointcomma (raphael mazoyer).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 2.3%, superiore al 83.7% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
pointcomma raphael_mazoyer	`= 3.1= 3.1.1= 3.5= 3.51= 3.53= 3.6= 3.8≤ 3.8b2`	No fix yet

Description

PHP remote file inclusion vulnerability in includes/classes/pctemplate.php in PointComma 3.8b2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the pcConfig[smartyPath] parameter.

References

packetstormsecurity.org/0911-exploits/pointcomma-rfi.txt · Exploit
exploit-db.com/exploits/10220 · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/54389

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free