CVE-2009-1551

Published: May 6, 2009Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Multiple PHP remote file inclusion vulnerabilities in Qt quickteam 2 allow remote attackers to execute arbitrary PHP code via a URL in the (1) qte_web_path parameter to qte_web.php and the (2) qte_root parameter to bin/qte_init.php.

Affected (1)

Products: Qt Cute: Quickteam

Qt Cute

1 product

Quickteam

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Qt Cute Quickteam	Version 2.0

Related CWEs

CWE-94

Improper Control of Generation of Code ('Code Injection')

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

References (10)

http://osvdb.org/54217

Source: cve@mitre.org

http://osvdb.org/54218

Source: cve@mitre.org

http://secunia.com/advisories/34997

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2009/1247

Source: cve@mitre.org

https://www.exploit-db.com/exploits/8602

Source: cve@mitre.org

http://osvdb.org/54217