CVE-2009-1226
Podcast Generator <= 1.1 - Unauthenticated Arbitrary File Deletion via Admin Delete Endpoint
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2009-1226. PoCs published by BlackHawk.
AI-analyzed exploit summary This exploit targets Podcast Generator <= 1.1 by deleting the config file and reconfiguring it with malicious code to achieve remote code execution. It leverages unauthenticated file deletion and unsanitized input in the configuration script.
Description
core/admin/delete.php in Podcast Generator 1.1 and earlier does not properly restrict access to administrative functions, which allows remote attackers to delete arbitrary files via the file parameter.
Exploits (1)
This exploit targets Podcast Generator <= 1.1 by deleting the config file and reconfiguring it with malicious code to achieve remote code execution. It leverages unauthenticated file deletion and unsanitized input in the configuration script.