NetSight
IP …
medium6.8

CVE-2009-3447

Unrestricted file upload vulnerability in RADactive I-Load before 2008.2.5.0 allows remote attackers to execute arbitrary code by uploading a file with an exec…

Impact

Unrestricted file upload vulnerability in RADactive I-Load before 2008.2.5.0 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, and then sending a request for a predictable filename during a short time window.

Affected products

VendorProductAffected versions
RadactiveI-Load
through 2008.2.4.0
Versions 1.6.3, 1.6.3.1, 1.6.3.2, 1.6.3.3, 1.7.0.0

Weakness classification

CWE-362

References