$ cve CVE-2009-4140 JSON

CVE-2009-4140 EXPLOIT

7.5

HIGH · CVSS 2.0 · EPSS 75.8% (pctl 100)

Patch early

A public exploit exists.

Description

Unrestricted file upload vulnerability in ofc_upload_image.php in Open Flash Chart v2 Beta 1 through v2 Lug Wyrm Charmer, as used in Piwik 0.2.35 through 0.4.3, Woopra Analytics Plugin before 1.4.3.2, and possibly other products, when register_globals is enabled, allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension through the name parameter with the code in the HTTP_RAW_POST_DATA parameter, then accessing it via a direct request to the file in tmp-upload-images/.

Scoring

CVSS	7.5 (HIGH, v2.0)
Vector	AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS	75.84% — more likely to be exploited than 100% of all CVEs
On CISA KEV	no
Public exploit	yes
Published	2009-12-22
Last modified	2026-06-16

Affected (2)

Vendor	Product
matomo	matomo
teethgrinder.co.uk	open flash chart

Public exploits

Source	Title	Date
exploit-db	Open Flash Chart 2 - Arbitrary File Upload (Metasploit)	2013-10-26
exploit-db	ZonPHP 2.25 - Remote Code Execution	2013-10-20
exploit-db	Joomla! Component com_civicrm 4.2.2 - Remote Code Injection	2013-04-22
exploit-db	OpenEMR - Arbitrary '.PHP' File Upload (Metasploit)	2013-02-20
exploit-db	OpenEMR 4.1.1 - 'ofc_upload_image.php' Arbitrary File Upload	2013-02-13
exploit-db	Piwik Open Flash Chart - Remote Code Execution	2009-12-17

References

→ the Explorer · watch your stack · NVD