CVE-2009-1230
Status: ModifiedMedium (6.5)—
Static code injection vulnerability in index.php in Podcast Generator 1.1 and earlier allows remote authenticated administrators to inject arbitrary PHP code into config.php via the recent parameter in a config change action.
CVSS
- Version: 2.0
- Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P
- Base score: 6.5
Exploitation probability (EPSS)
- Probability of exploitation in the next 30 days: 1.79%
- Percentile among all scored CVEs: 78
- Score date: 10/6/2026
EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).
Affected technologies (1)
CWEs
- CWE-94
References
Raw JSON (NVD)
Show
{
"id": "CVE-2009-1230",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 6.5,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P",
"authentication": "SINGLE",
"integrityImpact": "PARTIAL",
"accessComplexity": "LOW",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 6.4,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 8,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2009-04-02T15:30:00.517",
"references": [
{
"url": "https://www.exploit-db.com/exploits/8324",
"source": "cve@mitre.org"
},
{
"url": "https://www.exploit-db.com/exploits/8324",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-94"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Static code injection vulnerability in index.php in Podcast Generator 1.1 and earlier allows remote authenticated administrators to inject arbitrary PHP code into config.php via the recent parameter in a config change action."
},
{
"lang": "es",
"value": "Vulnerabilidad de inyección de código estático en index.php en Podcast Generator v1.1 y anteriores permite a administradores remotos autenticados inyectar codigo PHP a su elección en config.php a través de el parámetro \"recent\" en una acción de cambio de configuración."
}
],
"lastModified": "2026-06-16T23:06:48.977",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:podcast_generator:podcast_generator:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CB555065-7FFA-45D8-9814-02EE8B45F05C",
"versionEndIncluding": "1.1"
},
{
"criteria": "cpe:2.3:a:podcast_generator:podcast_generator:0.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "40E1E9E4-8EC1-44E3-94FF-A3F7FC341756"
},
{
"criteria": "cpe:2.3:a:podcast_generator:podcast_generator:0.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B51DEDE5-E7B4-44A1-86F0-D71F516AB7D8"
},
{
"criteria": "cpe:2.3:a:podcast_generator:podcast_generator:0.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6378A248-F8CE-4A6A-AC72-9DEAFE2AE6AD"
},
{
"criteria": "cpe:2.3:a:podcast_generator:podcast_generator:0.81:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8DF6FD0A-A18C-495A-B9E7-EE188EA1A58A"
},
{
"criteria": "cpe:2.3:a:podcast_generator:podcast_generator:0.91:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "49690E2C-AC1E-40BE-BE91-FAB522A3EA68"
},
{
"criteria": "cpe:2.3:a:podcast_generator:podcast_generator:0.92:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5BB0AED7-B499-440E-A4C1-3589512AFAB9"
},
{
"criteria": "cpe:2.3:a:podcast_generator:podcast_generator:0.93:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "765992EE-077D-4B67-80A3-5E5B664A4920"
},
{
"criteria": "cpe:2.3:a:podcast_generator:podcast_generator:0.94:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5230DAE5-0774-43A7-94ED-A9BDB2AD4D52"
},
{
"criteria": "cpe:2.3:a:podcast_generator:podcast_generator:0.95:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F571A8D8-5D07-4D6E-8282-75DE3F75E12C"
},
{
"criteria": "cpe:2.3:a:podcast_generator:podcast_generator:0.96:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1A3E9072-8FCE-4E5D-97C4-E7B60DF36207"
},
{
"criteria": "cpe:2.3:a:podcast_generator:podcast_generator:0.96.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D543A430-EFFA-470D-80F3-30016852E4A8"
},
{
"criteria": "cpe:2.3:a:podcast_generator:podcast_generator:1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FF53E2AD-1E11-4C55-8CFF-D580BFA63216"
},
{
"criteria": "cpe:2.3:a:podcast_generator:podcast_generator:1.0:beta_2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CA26821E-665A-4650-9694-2F83A00D31E9"
},
{
"criteria": "cpe:2.3:a:podcast_generator:podcast_generator:1.0_beta:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "86110300-D592-4079-9561-6CCD9C8CFD94"
},
{
"criteria": "cpe:2.3:a:podcast_generator:podcast_generator:1.0_beta2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4BC6F118-1C43-4C82-8DCE-BDFD78D6CB8C"
},
{
"criteria": "cpe:2.3:a:podcast_generator:podcast_generator:1.0_beta3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5B718D31-5746-43A9-AC72-79EF26716A9B"
},
{
"criteria": "cpe:2.3:a:podcast_generator:podcast_generator:1.0_beta4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "41207558-39B2-4B9C-B684-C21C04BB16E4"
},
{
"criteria": "cpe:2.3:a:podcast_generator:podcast_generator:1.0_beta4a:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4080859E-FABD-4668-BF6A-32905B3EC49A"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "cve@mitre.org"
}