CVE-2009-3220: Code Injection

Published Sep 16, 2009

Updated

PHP remote file inclusion vulnerability in cphtml2txt.php in All In One Control Panel (AIOCP) 1.4.001 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter.

Affected Software

1 affected component

Tecnick Aiocp=1.4.001

Event History

Sep 16, 2009

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2009-3220?

CVE-2009-3220 is classified as a critical severity vulnerability due to its potential for remote code execution.

How do I fix CVE-2009-3220?

The best way to mitigate CVE-2009-3220 is to upgrade All In One Control Panel to the latest version that addresses this vulnerability.

What is the impact of CVE-2009-3220?

CVE-2009-3220 allows remote attackers to execute arbitrary PHP code, leading to complete control over the affected system.

Which versions are affected by CVE-2009-3220?

CVE-2009-3220 specifically affects All In One Control Panel version 1.4.001.

Who is vulnerable to CVE-2009-3220?

Any server running All In One Control Panel version 1.4.001 is vulnerable to CVE-2009-3220 and should take immediate action.