CVE-2009-1314
body.asp in Web File Explorer 3.1 allows remote attackers to create arbitrary files and execute...
CVE-2009-1314 is a high vulnerability (CVSS 10.0) in Webfileexplorer Web File Explorer, published April 17, 2009. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 10.1%, the 95th percentile. No source names a fixed version.
body.asp in Web File Explorer 3.1 allows remote attackers to create arbitrary files and execute arbitrary code via the savefile action with a file parameter containing a filename that has an executable extension.
Exploit likelihood
What each source reports
NVD Score used
body.asp in Web File Explorer 3.1 allows remote attackers to create arbitrary files and execute arbitrary code via the savefile action with a file parameter containing a filename that has an executable extension.
- Record
CVE-2009-1314- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
body.asp in Web File Explorer 3.1 allows remote attackers to create arbitrary files and execute arbitrary code via the savefile action with a file parameter containing a filename that has an executable extension.
- Record
CVE-2009-1314- Updated
- 2026-11-02
EUVDEUVD-2009-1312 No score
body.asp in Web File Explorer 3.1 allows remote attackers to create arbitrary files and execute arbitrary code via the savefile action with a file parameter containing a filename that has an executable extension.
- Record
EUVD-2009-1312- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-mp25-5h93-26g6 No score
body.asp in Web File Explorer 3.1 allows remote attackers to create arbitrary files and execute...
body.asp in Web File Explorer 3.1 allows remote attackers to create arbitrary files and execute arbitrary code via the savefile action with a file parameter containing a filename that has an executable extension.
- Record
GHSA-mp25-5h93-26g6- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | WebFileExplorer 3.1 - Authentication Bypass | 2009-04-09 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, Exploit-DB, GitHub Advisories, NVD |