FreeSchool contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the '/biblioteca/bib_plform.php' script not properly sanitizing user input supplied to the 'CLASSPATH' parameter. This may allow an attacker to include a file from an arbitrary remote host that contains commands which will be executed by the vulnerable script with the same privileges as the web server.

OSVDB is not aware of a solution for this vulnerability.

• CVE ID: 2009-4471 (see also: NVD)
• Secunia Advisory ID: 36605
• ISS X-Force ID: 53017
• Related OSVDB ID: 57763 57764 57766 57767 57768 57769 57770 57771 57772 57773 57774 57775 57776 57777 57778 57779 57780 57781 57782 57783 57784 57785
• Milw0rm: 9582
• Exploit Database: 9582
• VUPEN Advisory: ADV-2009-2535
• Vendor URL: http://freeschool.istruzionego.eu/
  http://sourceforge.net/projects/freeschool/files/

• cr4wl3r