EUVD-2009-3434

Malware in sbrugna...

EUVD-2009-3433

Malware in sbrugna...

CVE-2009-3452

WebCoreModule.ashx in RADactive I-Load before 2008.2.5.0 allows remote attackers to obtain sensitive information via unspecified requests that trigger responses containing the saved-image folder pathname...

Directory traversal

Directory traversal vulnerability in WebCoreModule.ashx in RADactive I-Load before 2008.2.5.0 allows remote attackers to read arbitrary files via unspecified vectors...

CVE-2009-3450

Multiple cross-site scripting XSS vulnerabilities in WebCoreModule.ashx in RADactive I-Load before 2008.2.5.0 allow remote attackers to inject arbitrary web script or HTML via parameters with names beginning with underscore underscore sequences, which are incompatible with an XSS protection...

CVE-2009-3450

The CVE-2009-3450 entry describes multiple XSS vulnerabilities in WebCoreModule.ashx of RADactive I-Load before 2008.2.5.0. The issue stems from input parameters whose names begin with __ (double underscore), which bypasses the built‑in ASP.NET XSS protection and allows remote attackers to inject...

CVE-2009-3452

WebCoreModule.ashx in RADactive I-Load before 2008.2.5.0 allows remote attackers to obtain sensitive information via unspecified requests that trigger responses containing the saved-image folder pathname...

CVE-2009-3450

Multiple cross-site scripting XSS vulnerabilities in WebCoreModule.ashx in RADactive I-Load before 2008.2.5.0 allow remote attackers to inject arbitrary web script or HTML via parameters with names beginning with underscore underscore sequences, which are incompatible with an XSS protection...

CVE-2009-3451

Directory traversal vulnerability in WebCoreModule.ashx in RADactive I-Load before 2008.2.5.0 allows remote attackers to read arbitrary files via unspecified vectors...

CVE-2009-3452

The CVE-2009-3452 entry concerns WebCoreModule.ashx in RADactive I-Load prior to version 2008.2.5.0. The vulnerability allows remote attackers to obtain sensitive information via requests that trigger responses containing the path to the saved-image folder. The available connected documents corro...