critical10.0Public exploit code
CVE-2009-1314
body.asp in Web File Explorer 3.1 allows remote attackers to create arbitrary files and execute arbitrary code via the savefile action with a file parameter co…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- WebFileExplorer 3.1 - Authentication Bypass2009-04-09 · webapps · php · Verified
Impact
body.asp in Web File Explorer 3.1 allows remote attackers to create arbitrary files and execute arbitrary code via the savefile action with a file parameter containing a filename that has an executable extension.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Webfileexplorer | Web File Explorer | Version 3.1 |