CVE-2009-1314

CVE-2009-1314 is a critical vulnerability affecting Web File Explorer 3.1, allowing unauthenticated remote attackers to create arbitrary files and execute arbitrary code. The vulnerability stems from improper handling of the 'file' parameter in the 'savefile' action within body.asp, enabling the upload of files with executable extensions. With a CVSS score of 10.0, this flaw presents a severe risk of complete compromise (confidentiality, integrity, and availability). While no active exploitation or Metasploit/Nuclei modules are noted, an authentication bypass exploit exists on ExploitDB, and despite its age, the high severity warrants attention.