CVE-2009-3450

Radactive I-load < 2008.r2 - XSS

Title source: rule

Description

Multiple cross-site scripting (XSS) vulnerabilities in WebCoreModule.ashx in RADactive I-Load before 2008.2.5.0 allow remote attackers to inject arbitrary web script or HTML via parameters with names beginning with __ (underscore underscore) sequences, which are incompatible with an XSS protection mechanism provided by Microsoft ASP.NET.

References (6)

Scores

EPSS 0.0053
EPSS Percentile 67.0%

Classification

CWE
CWE-79
Status published

Affected Products (48)

radactive/i-load < 2008.r2
radactive/i-load
radactive/i-load
radactive/i-load
radactive/i-load
radactive/i-load
radactive/i-load
radactive/i-load
radactive/i-load
radactive/i-load
radactive/i-load
radactive/i-load
radactive/i-load
radactive/i-load
radactive/i-load
... and 33 more

Timeline

Published Sep 29, 2009
Tracked Since Feb 18, 2026