Unrated severityNVD Advisory· Published Mar 26, 2010· Updated Jun 16, 2026

CVE-2009-4747

Description

PHP remote file inclusion vulnerability in public/code/cp_html2xhtmlbasic.php in All In One Control Panel (AIOCP) 1.4.001 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter, a different vector than CVE-2009-3220.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Tecnick/Aiocp
cpe:2.3:a:tecnick:aiocp:1.4.001:*:*:*:*:*:*:*
Tecnick/All In One Control Panelllm-fuzzy
Range: = 1.4.001

Patches

Vulnerability mechanics

References

www.securityfocus.com/bid/36609nvdExploit
www.securityfocus.com/archive/1/507030/100/0/threadednvd
exchange.xforce.ibmcloud.com/vulnerabilities/53679nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000