EUVD-2009-3429

Malware in sbrugna...

EUVD-2009-3433

Malware in sbrugna...

EUVD-2009-3434

Malware in sbrugna...

EUVD-2009-3432

Malware in sbrugna...

CVE-2009-3451

Directory traversal vulnerability in WebCoreModule.ashx in RADactive I-Load before 2008.2.5.0 allows remote attackers to read arbitrary files via unspecified vectors...

Directory traversal

Directory traversal vulnerability in WebCoreModule.ashx in RADactive I-Load before 2008.2.5.0 allows remote attackers to read arbitrary files via unspecified vectors...

CVE-2009-3452

WebCoreModule.ashx in RADactive I-Load before 2008.2.5.0 allows remote attackers to obtain sensitive information via unspecified requests that trigger responses containing the saved-image folder pathname...

Unrestricted file upload

Unrestricted file upload vulnerability in RADactive I-Load before 2008.2.5.0 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, and then sending a request for a predictable filename during a short time window...

CVE-2009-3447

Unrestricted file upload vulnerability in RADactive I-Load before 2008.2.5.0 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, and then sending a request for a predictable filename during a short time window...

CVE-2009-3452

WebCoreModule.ashx in RADactive I-Load before 2008.2.5.0 allows remote attackers to obtain sensitive information via unspecified requests that trigger responses containing the saved-image folder pathname...

CVE-2009-3452

The CVE-2009-3452 entry concerns WebCoreModule.ashx in RADactive I-Load prior to version 2008.2.5.0. The vulnerability allows remote attackers to obtain sensitive information via requests that trigger responses containing the path to the saved-image folder. The available connected documents corro...

CVE-2009-3451

The CVE-2009-3451 entry describes a directory traversal vulnerability in RADactive I-Load’s WebCoreModule.ashx, affecting versions prior to 2008.2.5.0. The flaw enables remote attackers to read arbitrary files via unspecified vectors due to improper input handling in the WebCoreModule.ashx compon...

CVE-2009-3450

The CVE-2009-3450 entry describes multiple XSS vulnerabilities in WebCoreModule.ashx of RADactive I-Load before 2008.2.5.0. The issue stems from input parameters whose names begin with __ (double underscore), which bypasses the built‑in ASP.NET XSS protection and allows remote attackers to inject...

CVE-2009-3451

Directory traversal vulnerability in WebCoreModule.ashx in RADactive I-Load before 2008.2.5.0 allows remote attackers to read arbitrary files via unspecified vectors...

CVE-2009-3447

CVE-2009-3447 describes an unrestricted file upload vulnerability in RADactive I-Load prior to 2008.2.5.0 that enables remote code execution by uploading a file with an executable extension and then requesting a predictable filename within a short window. Affected: RADactive I-Load (before 2008.2...

CVE-2009-3447

Unrestricted file upload vulnerability in RADactive I-Load before 2008.2.5.0 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, and then sending a request for a predictable filename during a short time window...

CVE-2009-3450

Multiple cross-site scripting XSS vulnerabilities in WebCoreModule.ashx in RADactive I-Load before 2008.2.5.0 allow remote attackers to inject arbitrary web script or HTML via parameters with names beginning with underscore underscore sequences, which are incompatible with an XSS protection...

CVE-2009-3451: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in WebCoreModule.ashx in RADactive I-Load before 2008.2.5.0 allows remote attackers to read arbitrary files via unspecified vectors...

CVE-2009-3452: Exposure of Sensitive Information to an Unauthorized Actor

WebCoreModule.ashx in RADactive I-Load before 2008.2.5.0 allows remote attackers to obtain sensitive information via unspecified requests that trigger responses containing the saved-image folder pathname...

CVE-2009-3447: Concurrent Execution using Shared Resource with Improper Synchronization

Unrestricted file upload vulnerability in RADactive I-Load before 2008.2.5.0 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, and then sending a request for a predictable filename during a short time window...