CVE-2009-3452

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2009-09-29 · updated 2026-06-16
Weakness: CWE-200

Description

WebCoreModule.ashx in RADactive I-Load before 2008.2.5.0 allows remote attackers to obtain sensitive information via unspecified requests that trigger responses containing the saved-image folder pathname.

Affected products

Radactive I-Load: through 2008.2.4.0; 1.6.3, 1.6.3.1, 1.6.3.2, 1.6.3.3, 1.7.0.0, 1.7.0.1 (+39)

References

http://radnet.radactive.com/forum/Default.aspx?g=posts&t=339
http://secunia.com/advisories/23807
http://www.osvdb.org/58194
http://www.securityfocus.com/archive/1/506555/100/0/threaded
https://www.sec-consult.com/files/20090917-0_RADactive_I-Load_Multiple_Vulnerabilities.txt
http://radnet.radactive.com/forum/Default.aspx?g=posts&t=339
http://secunia.com/advisories/23807
http://www.osvdb.org/58194
http://www.securityfocus.com/archive/1/506555/100/0/threaded
https://www.sec-consult.com/files/20090917-0_RADactive_I-Load_Multiple_Vulnerabilities.txt

Get alerted when CVE-2009-3452 or the next vulnerability affects your stack