packetstormsecurity.org
http://packetstormsecurity.org/0909-exploits/achievo134-rfi.txt CVE-2009-3705
Achievo 1.3.4 - Remote File Inclusion
Record summary
CVE-2009-3705 has a selected CVSS score of 7.5; EIP currently links 1 catalogued exploit.
Description
PHP remote file inclusion vulnerability in debugger.php in Achievo before 1.4.0 allows remote attackers to execute arbitrary PHP code via a URL in the config_atkroot parameter.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBAchievo 1.3.4 - Remote File InclusionExploitDB exploitby M3NW5Not analyzed1 file
References
41023017vdb entry
http://securitytracker.com/id?1023017 achievo.orgConfirmation
http://www.achievo.org/download/releasenotes/1_4_0 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2009-3705