CVE-2009-4747: Tecnick Aiocp

High severity, CVSS 7.5. EPSS: 3% chance of exploitation in the next 30 days.

PHP remote file inclusion vulnerability in public/code/cp_html2xhtmlbasic.php in All In One Control Panel (AIOCP) 1.4.001 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter, a different vector than CVE-2009-3220.

Affected products

• Tecnick Aiocp: version 1.4.001 only

Published 2010-03-26. Last modified 2026-06-16.