CVE-2009-3447

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2009-09-29 · updated 2026-06-16
Weakness: CWE-362

Description

Unrestricted file upload vulnerability in RADactive I-Load before 2008.2.5.0 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, and then sending a request for a predictable filename during a short time window.

Affected products

Radactive I-Load: through 2008.2.4.0; 1.6.3, 1.6.3.1, 1.6.3.2, 1.6.3.3, 1.7.0.0, 1.7.0.1 (+39)

References

http://radnet.radactive.com/forum/Default.aspx?g=posts&t=339
http://secunia.com/advisories/23807
http://www.osvdb.org/58197
http://www.securityfocus.com/archive/1/506555/100/0/threaded
https://www.sec-consult.com/files/20090917-0_RADactive_I-Load_Multiple_Vulnerabilities.txt
http://radnet.radactive.com/forum/Default.aspx?g=posts&t=339
http://secunia.com/advisories/23807
http://www.osvdb.org/58197
http://www.securityfocus.com/archive/1/506555/100/0/threaded
https://www.sec-consult.com/files/20090917-0_RADactive_I-Load_Multiple_Vulnerabilities.txt

Get alerted when CVE-2009-3447 or the next vulnerability affects your stack