body.asp in Web File Explorer 3.1 allows remote attackers to create arbitrary files and execute arbitrary code via the savefile action with a file parameter containing a filename that has an executable extension.
References
Configurations
Information
Published : 2009-04-16 17:30
Updated : 2017-09-28 18:34
NVD link : CVE-2009-1314
Mitre link : CVE-2009-1314
JSON object : View
CWE
Products Affected
webfileexplorer
- web_file_explorer