CVE-2009-3693
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
50Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 42%
from disclosure to weaponsame day
Published on NVDOct 13
1st PoCSep 29
metasploitSep 29
Directory traversal vulnerability in the Persits.XUpload.2 ActiveX control (XUpload.ocx) in HP LoadRunner 9.5 allows remote attackers to create arbitrary files via \.. (backwards slash dot dot) sequences in the third argument to the MakeHttpRequest method.
Affected products
n/a · n/apublic PoCs found — 2✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/9806exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/16598⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.