{
  "id": "CVE-2009-1226",
  "sourceIdentifier": "cve@mitre.org",
  "published": "2009-04-02T15:30:00.420",
  "lastModified": "2017-09-29T01:34:14.827",
  "vulnStatus": "Modified",
  "descriptions": [
    {
      "lang": "en",
      "value": "core/admin/delete.php in Podcast Generator 1.1 and earlier does not properly restrict access to administrative functions, which allows remote attackers to delete arbitrary files via the file parameter."
    },
    {
      "lang": "es",
      "value": "core/admin/delete.php en Podcast Generator v1.1 y anteriores no maneja adecuadamente las restricciones de acceso de funciones administrativas, lo que permite a atacantes remotos borrar ficheros de forma arbitraria a trav\u00e9s del par\u00e1metro \"file\"."
    }
  ],
  "metrics": {
    "cvssMetricV2": [
      {
        "source": "nvd@nist.gov",
        "type": "Primary",
        "cvssData": {
          "version": "2.0",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "accessVector": "NETWORK",
          "accessComplexity": "LOW",
          "authentication": "NONE",
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "availabilityImpact": "PARTIAL",
          "baseScore": 7.5
        },
        "baseSeverity": "HIGH",
        "exploitabilityScore": 10.0,
        "impactScore": 6.4,
        "acInsufInfo": false,
        "obtainAllPrivilege": false,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "weaknesses": [
    {
      "source": "nvd@nist.gov",
      "type": "Primary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-264"
        }
      ]
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:podcast_generator:podcast_generator:*:*:*:*:*:*:*:*",
              "versionEndIncluding": "1.1",
              "matchCriteriaId": "CB555065-7FFA-45D8-9814-02EE8B45F05C"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:podcast_generator:podcast_generator:0.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "40E1E9E4-8EC1-44E3-94FF-A3F7FC341756"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:podcast_generator:podcast_generator:0.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "B51DEDE5-E7B4-44A1-86F0-D71F516AB7D8"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:podcast_generator:podcast_generator:0.9:*:*:*:*:*:*:*",
              "matchCriteriaId": "6378A248-F8CE-4A6A-AC72-9DEAFE2AE6AD"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:podcast_generator:podcast_generator:0.81:*:*:*:*:*:*:*",
              "matchCriteriaId": "8DF6FD0A-A18C-495A-B9E7-EE188EA1A58A"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:podcast_generator:podcast_generator:0.91:*:*:*:*:*:*:*",
              "matchCriteriaId": "49690E2C-AC1E-40BE-BE91-FAB522A3EA68"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:podcast_generator:podcast_generator:0.92:*:*:*:*:*:*:*",
              "matchCriteriaId": "5BB0AED7-B499-440E-A4C1-3589512AFAB9"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:podcast_generator:podcast_generator:0.93:*:*:*:*:*:*:*",
              "matchCriteriaId": "765992EE-077D-4B67-80A3-5E5B664A4920"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:podcast_generator:podcast_generator:0.94:*:*:*:*:*:*:*",
              "matchCriteriaId": "5230DAE5-0774-43A7-94ED-A9BDB2AD4D52"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:podcast_generator:podcast_generator:0.95:*:*:*:*:*:*:*",
              "matchCriteriaId": "F571A8D8-5D07-4D6E-8282-75DE3F75E12C"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:podcast_generator:podcast_generator:0.96:*:*:*:*:*:*:*",
              "matchCriteriaId": "1A3E9072-8FCE-4E5D-97C4-E7B60DF36207"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:podcast_generator:podcast_generator:0.96.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "D543A430-EFFA-470D-80F3-30016852E4A8"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:podcast_generator:podcast_generator:1.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "FF53E2AD-1E11-4C55-8CFF-D580BFA63216"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:podcast_generator:podcast_generator:1.0:beta_2:*:*:*:*:*:*",
              "matchCriteriaId": "CA26821E-665A-4650-9694-2F83A00D31E9"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:podcast_generator:podcast_generator:1.0_beta:*:*:*:*:*:*:*",
              "matchCriteriaId": "86110300-D592-4079-9561-6CCD9C8CFD94"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:podcast_generator:podcast_generator:1.0_beta2:*:*:*:*:*:*:*",
              "matchCriteriaId": "4BC6F118-1C43-4C82-8DCE-BDFD78D6CB8C"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:podcast_generator:podcast_generator:1.0_beta3:*:*:*:*:*:*:*",
              "matchCriteriaId": "5B718D31-5746-43A9-AC72-79EF26716A9B"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:podcast_generator:podcast_generator:1.0_beta4:*:*:*:*:*:*:*",
              "matchCriteriaId": "41207558-39B2-4B9C-B684-C21C04BB16E4"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:podcast_generator:podcast_generator:1.0_beta4a:*:*:*:*:*:*:*",
              "matchCriteriaId": "4080859E-FABD-4668-BF6A-32905B3EC49A"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "http://www.securityfocus.com/bid/34317",
      "source": "cve@mitre.org",
      "tags": [
        "Exploit"
      ]
    },
    {
      "url": "https://www.exploit-db.com/exploits/8324",
      "source": "cve@mitre.org"
    }
  ]
}