CVE-2009-20010 | Dogfood CRM up to 2.0.10 spell.php data os command injection (EDB-16917)

August 30, 2025 Yanac

A vulnerability described as critical has been identified in Dogfood CRM up to 2.0.10. Affected by this issue is some unknown functionality of the file spell.php. The manipulation of the argument data results in os command injection. This vulnerability only affects products that are no longer supported by the maintainer.

This vulnerability is identified as CVE-2009-20010. The attack can be executed remotely. Additionally, an exploit exists.VulDB Recent EntriesRead More