What’s Vulnerable › Vulnerabilities
CVE-2009-1230
- Severity: medium (CVSS 6.5 v2.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.8% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2009-04-02 · updated 2026-06-16
- Weakness: CWE-94
Description
Static code injection vulnerability in index.php in Podcast Generator 1.1 and earlier allows remote authenticated administrators to inject arbitrary PHP code into config.php via the recent parameter in a config change action.
Affected products
- Podcast Generator: through 1.1; 0.6, 0.8, 0.9, 0.81, 0.91, 0.92 (+12)
References
Get alerted when CVE-2009-1230 or the next vulnerability affects your stack