CVE-2009-3447

Опубликовано: 29 сент. 2009

Источник: nvd

CVSS2: 6.8

EPSS Низкий

Описание

Unrestricted file upload vulnerability in RADactive I-Load before 2008.2.5.0 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, and then sending a request for a predictable filename during a short time window.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:radactive:i-load:*:*:*:*:*:*:*:*

Версия до 2008.2.4.0 (включая)

cpe:2.3:a:radactive:i-load:1.6.3:*:*:*:*:*:*:*

cpe:2.3:a:radactive:i-load:1.6.3.1:*:*:*:*:*:*:*

cpe:2.3:a:radactive:i-load:1.6.3.2:*:*:*:*:*:*:*

cpe:2.3:a:radactive:i-load:1.6.3.3:*:*:*:*:*:*:*

cpe:2.3:a:radactive:i-load:1.7.0.0:*:*:*:*:*:*:*

cpe:2.3:a:radactive:i-load:1.7.0.1:*:*:*:*:*:*:*

cpe:2.3:a:radactive:i-load:1.7.0.2:*:*:*:*:*:*:*

cpe:2.3:a:radactive:i-load:1.7.0.3:*:*:*:*:*:*:*

cpe:2.3:a:radactive:i-load:1.7.0.4:*:*:*:*:*:*:*

cpe:2.3:a:radactive:i-load:1.7.0.5:*:*:*:*:*:*:*

cpe:2.3:a:radactive:i-load:1.7.0.6:*:*:*:*:*:*:*

cpe:2.3:a:radactive:i-load:1.7.0.7:*:*:*:*:*:*:*

cpe:2.3:a:radactive:i-load:1.7.0.8:*:*:*:*:*:*:*

cpe:2.3:a:radactive:i-load:1.7.0.9:*:*:*:*:*:*:*

cpe:2.3:a:radactive:i-load:1.7.0.10:*:*:*:*:*:*:*

cpe:2.3:a:radactive:i-load:1.7.0.11:*:*:*:*:*:*:*

cpe:2.3:a:radactive:i-load:1.7.0.12:*:*:*:*:*:*:*

cpe:2.3:a:radactive:i-load:1.7.5.0:*:*:*:*:*:*:*

cpe:2.3:a:radactive:i-load:1.7.5.1:*:*:*:*:*:*:*

cpe:2.3:a:radactive:i-load:1.7.5.2:*:*:*:*:*:*:*

cpe:2.3:a:radactive:i-load:1.7.6.0:*:*:*:*:*:*:*

cpe:2.3:a:radactive:i-load:1.7.6.1:*:*:*:*:*:*:*

cpe:2.3:a:radactive:i-load:1.7.7.0:*:*:*:*:*:*:*

cpe:2.3:a:radactive:i-load:1.7.7.1:*:*:*:*:*:*:*

cpe:2.3:a:radactive:i-load:1.7.7.2:*:*:*:*:*:*:*

cpe:2.3:a:radactive:i-load:1.7.7.3:*:*:*:*:*:*:*

cpe:2.3:a:radactive:i-load:1.7.7.4:*:*:*:*:*:*:*

cpe:2.3:a:radactive:i-load:1.7.7.5:*:*:*:*:*:*:*

cpe:2.3:a:radactive:i-load:1.7.7.6:*:*:*:*:*:*:*

cpe:2.3:a:radactive:i-load:1.7.7.8:*:*:*:*:*:*:*

cpe:2.3:a:radactive:i-load:1.7.7.9:*:*:*:*:*:*:*

cpe:2.3:a:radactive:i-load:1.7.7.11:*:*:*:*:*:*:*

cpe:2.3:a:radactive:i-load:2008.1.0.0:*:*:*:*:*:*:*

cpe:2.3:a:radactive:i-load:2008.1.0.1:*:*:*:*:*:*:*

cpe:2.3:a:radactive:i-load:2008.1.0.2:*:*:*:*:*:*:*

cpe:2.3:a:radactive:i-load:2008.1.1.0:*:*:*:*:*:*:*

cpe:2.3:a:radactive:i-load:2008.1.2.0:*:*:*:*:*:*:*

cpe:2.3:a:radactive:i-load:2008.1.2.1:*:*:*:*:*:*:*

cpe:2.3:a:radactive:i-load:2008.1.3.0:*:*:*:*:*:*:*

cpe:2.3:a:radactive:i-load:2008.2.1.0:*:*:*:*:*:*:*

cpe:2.3:a:radactive:i-load:2008.2.1.1:*:*:*:*:*:*:*

cpe:2.3:a:radactive:i-load:2008.2.2.0:*:*:*:*:*:*:*

cpe:2.3:a:radactive:i-load:2008.2.3.0:*:*:*:*:*:*:*

cpe:2.3:a:radactive:i-load:2008.2.3.1:*:*:*:*:*:*:*

cpe:2.3:a:radactive:i-load:2008.2.3.2:*:*:*:*:*:*:*

EPSS

Процентиль: 79%

0.0126

Низкий

6.8 Medium

CVSS2

Дефекты

CWE-362

Связанные уязвимости

GHSA-wwp4-jfvw-r542

github

почти 4 года назад