CVE:CVE-2009-1226
CNNVD:CNNVD-200904-038
Podcast Generator 1.1及之前版本中的core/admin/delete.php没有正确的限制对管理函数的访问，这使得远程攻击者可以借助文件参数，删除任意文件。
solution:Upgrade podcast_generator podcast_generator to a higher version than 1.1,0.6,0.8,0.9,0.81,0.91,0.92,0.93,0.94,0.95,0.96,0.96.2,1.0,1.0:beta_2,1.0_beta,1.0_beta2,1.0_beta3,1.0_beta4,1.0_beta4a,and avoid the version (,1.1],0.6,0.8,0.9,0.81,0.91,0.92,0.93,0.94,0.95,0.96,0.96.2,1.0,1.0:beta_2,1.0_beta,1.0_beta2,1.0_beta3,1.0_beta4,1.0_beta4a