CVE-2009-1551

Multiple PHP remote file inclusion vulnerabilities in Qt quickteam 2 allow remote attackers to execute arbitrary PHP code via a URL in the (1) qte_web_path parameter to qte_web.php and the (2) qte_root parameter to bin/qte_init.php.

Affected products

Qt

Qt-cute Quickteam

= 2.0

Fix

Available

CVSS 2.0

7.5 HIGH

EPSS

27.0% (98th percentile)

Weakness

CWE-94

NVD status

Modified

Published

2009-05-06