CVE-2009-1609: Input Validation
Published May 11, 2009
·Updated
Unrestricted file upload vulnerability in admin/uploadform.asp in Battle Blog 1.25 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file.
Affected Software
1 affected component
BattleBlog Battle Blog=1.25
Event History
May 11, 2009
CVE Published
via MITRE·07:28 PM
Data Sourced
via MITRE·07:28 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2009-1609?
CVE-2009-1609 is classified as a high severity vulnerability due to its exploitation potential allowing arbitrary code execution.
2
How do I fix CVE-2009-1609?
To fix CVE-2009-1609, ensure that the application properly restricts file uploads to prevent executable file types.
3
What software is affected by CVE-2009-1609?
CVE-2009-1609 affects Battle Blog version 1.25.
4
What type of vulnerability is CVE-2009-1609?
CVE-2009-1609 is an unrestricted file upload vulnerability.
5
Can CVE-2009-1609 lead to a server compromise?
Yes, CVE-2009-1609 can lead to a server compromise by allowing attackers to upload and execute malicious files.