CVE-2009-3705 | BDVDB-2026-38928 Detail

Description#

PHP remote file inclusion vulnerability in debugger.php in Achievo before 1.4.0 allows remote attackers to execute arbitrary PHP code via a URL in the config_atkroot parameter.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://securitytracker.com/id?1023017
http://packetstormsecurity.org/0909-exploits/achievo134-rfi.txt
http://www.achievo.org/download/releasenotes/1_4_0

Exploit#

No public exploit known

History#

Version 12009-10-16Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.