CVE-2009-4220

PHP remote file inclusion vulnerability in includes/classes/pctemplate.php in PointComma 3.8b2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the pcConfig[smartyPath] parameter.
Code Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 75%
VendorProductVersion
raphael_mazoyerpointcomma
𝑥
≤ 3.8b2
raphael_mazoyerpointcomma
3.1
raphael_mazoyerpointcomma
3.1.1
raphael_mazoyerpointcomma
3.5
raphael_mazoyerpointcomma
3.5:beta_2
raphael_mazoyerpointcomma
3.6
raphael_mazoyerpointcomma
3.8:beta
raphael_mazoyerpointcomma
3.51
raphael_mazoyerpointcomma
3.51:beta
raphael_mazoyerpointcomma
3.53:beta
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://packetstormsecurity.org/0911-exploits/pointcomma-rfi.txt
http://www.exploit-db.com/exploits/10220
https://exchange.xforce.ibmcloud.com/vulnerabilities/54389
http://packetstormsecurity.org/0911-exploits/pointcomma-rfi.txt
http://www.exploit-db.com/exploits/10220
https://exchange.xforce.ibmcloud.com/vulnerabilities/54389