CVE-2009-4854: Scripts.oldguy Talkback

High severity, CVSS 7.5. EPSS: 3.1% chance of exploitation in the next 30 days.

addons/import.php in TalkBack 2.3.14 allows remote attackers to execute arbitrary commands via the result parameter.

Affected products

• Scripts.oldguy Talkback: version 2.3.14 only

Published 2010-05-07. Last modified 2026-06-16.