CVE-2009-3173

CVE-2009-3173 describes an unrestricted file upload vulnerability in The Rat CMS Alpha 2, specifically within the admin/add_album.php component. This flaw allows unauthenticated remote attackers to execute arbitrary code by uploading files with executable extensions, which can then be accessed directly in the images/ directory. The vulnerability carries a CVSS score of 6.8, indicating a medium severity with a network attack vector, medium attack complexity, and potential for partial compromise of confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, an exploit is publicly available on ExploitDB, though there is no evidence of active exploitation, Metasploit modules, or significant community discussion or media coverage.