EUVD-2009-3432

Malware in sbrugna...

EUVD-2009-3434

Malware in sbrugna...

EUVD-2009-3433

Malware in sbrugna...

EUVD-2009-3429

Malware in sbrugna...

CVE-2009-3452

WebCoreModule.ashx in RADactive I-Load before 2008.2.5.0 allows remote attackers to obtain sensitive information via unspecified requests that trigger responses containing the saved-image folder pathname...

Unrestricted file upload

Unrestricted file upload vulnerability in RADactive I-Load before 2008.2.5.0 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, and then sending a request for a predictable filename during a short time window...

CVE-2009-3447

Unrestricted file upload vulnerability in RADactive I-Load before 2008.2.5.0 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, and then sending a request for a predictable filename during a short time window...

CVE-2009-3451

Directory traversal vulnerability in WebCoreModule.ashx in RADactive I-Load before 2008.2.5.0 allows remote attackers to read arbitrary files via unspecified vectors...

Directory traversal

Directory traversal vulnerability in WebCoreModule.ashx in RADactive I-Load before 2008.2.5.0 allows remote attackers to read arbitrary files via unspecified vectors...

CVE-2009-3450

The CVE-2009-3450 entry describes multiple XSS vulnerabilities in WebCoreModule.ashx of RADactive I-Load before 2008.2.5.0. The issue stems from input parameters whose names begin with __ (double underscore), which bypasses the built‑in ASP.NET XSS protection and allows remote attackers to inject...

CVE-2009-3447

CVE-2009-3447 describes an unrestricted file upload vulnerability in RADactive I-Load prior to 2008.2.5.0 that enables remote code execution by uploading a file with an executable extension and then requesting a predictable filename within a short window. Affected: RADactive I-Load (before 2008.2...

CVE-2009-3451

The CVE-2009-3451 entry describes a directory traversal vulnerability in RADactive I-Load’s WebCoreModule.ashx, affecting versions prior to 2008.2.5.0. The flaw enables remote attackers to read arbitrary files via unspecified vectors due to improper input handling in the WebCoreModule.ashx compon...

CVE-2009-3450

Multiple cross-site scripting XSS vulnerabilities in WebCoreModule.ashx in RADactive I-Load before 2008.2.5.0 allow remote attackers to inject arbitrary web script or HTML via parameters with names beginning with underscore underscore sequences, which are incompatible with an XSS protection...

CVE-2009-3452

The CVE-2009-3452 entry concerns WebCoreModule.ashx in RADactive I-Load prior to version 2008.2.5.0. The vulnerability allows remote attackers to obtain sensitive information via requests that trigger responses containing the path to the saved-image folder. The available connected documents corro...

CVE-2009-3447

Unrestricted file upload vulnerability in RADactive I-Load before 2008.2.5.0 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, and then sending a request for a predictable filename during a short time window...

CVE-2009-3452

WebCoreModule.ashx in RADactive I-Load before 2008.2.5.0 allows remote attackers to obtain sensitive information via unspecified requests that trigger responses containing the saved-image folder pathname...

CVE-2009-3451

Directory traversal vulnerability in WebCoreModule.ashx in RADactive I-Load before 2008.2.5.0 allows remote attackers to read arbitrary files via unspecified vectors...

RADactive I-Load多个信息泄露和代码执行漏洞

I-Load是一个ASP.NET组件，用于在ASP.NET应用中管理图形上传。 I-Load组件中存在多个安全漏洞，允许远程攻击者泄露敏感信息、执行跨站脚本或入侵有漏洞的系统。 1 WebCoreModule.ashx脚本会在某些请求和响应中显示保存图形文件夹的绝对路径。 2 WebcodeModule.ashx所使用的大多数参数以两个下划线字符开始，这会禁用内置的ASP.NET防跨站脚本功能。某些参数没有得到充分的过滤，导致向响应中注入任意JavaScript。 3 WebCoreModule.ashx中的目录遍历漏洞允许攻击者在服务器上读取任意文件，包括配置文件、应用源码等。 4...

SEC Consult SA-20090917-0 :: RADactive I-Load Multiple Vulnerabilities

SEC Consult Security Advisory 20090917-0 ======================================================================= title: Multiple Vulnerabilities in RADactive I-Load products: RADactive I-Load vulnerable version: = I-Load 2008.2.4.0 fixed version: I-Load 2008.2.5.0 impact: critical homepage:...