CVE-2009-3447: Radactive I-Load

Medium severity, CVSS 6.8. EPSS: 1.7% chance of exploitation in the next 30 days.

Unrestricted file upload vulnerability in RADactive I-Load before 2008.2.5.0 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, and then sending a request for a predictable filename during a short time window.

Affected products

• Radactive I-Load: up to and including 2008.2.4.0; version 1.6.3 only; version 1.6.3.1 only; version 1.6.3.2 only; version 1.6.3.3 only; version 1.7.0.0 only; …

Published 2009-09-29. Last modified 2026-06-16.