CVE:CVE-2009-1230
CNNVD:CNNVD-200904-042
Podcast Generator是一套使用PHP语言编写的免费播客发布脚本。
Podcast Generator的core/archive_cat.php、core/admin/itunescategories.php和core/admin/login.php页面没有正确地过滤对GLOBALS[absoluteurl]参数所传送的输入，core/themes.php页面没有正确地过滤对GLOBALS[theme_path]参数所传送的输入，这可能用于包含本地或外部资源的任意文件；此外core/admin/delete.php页面没有正确地过滤对file和ext"参数所传送的输入，可能导致删除任意文件。成功利用这些漏洞要求打开了register_globals。
solution:Upgrade podcast_generator podcast_generator to a higher version than 1.1,0.6,0.8,0.9,0.81,0.91,0.92,0.93,0.94,0.95,0.96,0.96.2,1.0,1.0:beta_2,1.0_beta,1.0_beta2,1.0_beta3,1.0_beta4,1.0_beta4a,and avoid the version (,1.1],0.6,0.8,0.9,0.81,0.91,0.92,0.93,0.94,0.95,0.96,0.96.2,1.0,1.0:beta_2,1.0_beta,1.0_beta2,1.0_beta3,1.0_beta4,1.0_beta4a