{"api_version":"1","generated_at":"2026-07-23T08:55:47+00:00","cve":"CVE-2009-0301","urls":{"html":"https://cve.report/CVE-2009-0301","api":"https://cve.report/api/cve/CVE-2009-0301.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2009-0301","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2009-0301"},"summary":{"title":"CVE-2009-0301","description":"Multiple insecure method vulnerabilities in the FlexCell.Grid ActiveX control (FlexCell.ocx) in FlexCell Grid Control 5.6.9 allow remote attackers to create and overwrite arbitrary files via the (1) SaveFile and (2) ExportToXML methods.","state":"PUBLISHED","assigner":"mitre","published_at":"2009-01-27 20:30:05","updated_at":"2026-04-23 00:35:47"},"problem_types":["NVD-CWE-Other","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"6.8","severity":"","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"https://www.exploit-db.com/exploits/7868","name":"https://www.exploit-db.com/exploits/7868","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"FlexCell Grid Control 5.6.9 - Remote File Overwrite - Windows remote Exploit","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/33664","name":"http://secunia.com/advisories/33664","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"FlexCell Grid ActiveX Control \"SaveFile()\" and \"ExportToXML()\" Insecure Methods - Secunia Advisories - Vulnerability Information - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/33453","name":"http://www.securityfocus.com/bid/33453","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"FlexCell Grid Control (ActiveX) Multiple Arbitrary File Overwrite Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-0301","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-0301","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2009","cve_id":"301","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"grid2000","cpe5":"flexcell_grid_control","cpe6":"5.6.9","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T04:31:25.412Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"7868","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred"],"url":"https://www.exploit-db.com/exploits/7868"},{"name":"33453","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/33453"},{"name":"33664","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/33664"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2009-01-26T00:00:00.000Z","descriptions":[{"lang":"en","value":"Multiple insecure method vulnerabilities in the FlexCell.Grid ActiveX control (FlexCell.ocx) in FlexCell Grid Control 5.6.9 allow remote attackers to create and overwrite arbitrary files via the (1) SaveFile and (2) ExportToXML methods."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-09-28T12:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"7868","tags":["exploit","x_refsource_EXPLOIT-DB"],"url":"https://www.exploit-db.com/exploits/7868"},{"name":"33453","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/33453"},{"name":"33664","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/33664"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2009-0301","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Multiple insecure method vulnerabilities in the FlexCell.Grid ActiveX control (FlexCell.ocx) in FlexCell Grid Control 5.6.9 allow remote attackers to create and overwrite arbitrary files via the (1) SaveFile and (2) ExportToXML methods."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"7868","refsource":"EXPLOIT-DB","url":"https://www.exploit-db.com/exploits/7868"},{"name":"33453","refsource":"BID","url":"http://www.securityfocus.com/bid/33453"},{"name":"33664","refsource":"SECUNIA","url":"http://secunia.com/advisories/33664"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2009-0301","datePublished":"2009-01-27T20:00:00.000Z","dateReserved":"2009-01-27T00:00:00.000Z","dateUpdated":"2024-08-07T04:31:25.412Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2009-01-27 20:30:05","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["NVD-CWE-Other","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:grid2000:flexcell_grid_control:5.6.9:*:*:*:*:*:*:*","matchCriteriaId":"8ED66658-42A9-4EB2-A7FE-4E7A594B4F2A"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2009","CveId":"301","Ordinal":"1","Title":"CVE-2009-0301","CVE":"CVE-2009-0301","Year":"2009"},"notes":[{"CveYear":"2009","CveId":"301","Ordinal":"1","NoteData":"Multiple insecure method vulnerabilities in the FlexCell.Grid ActiveX control (FlexCell.ocx) in FlexCell Grid Control 5.6.9 allow remote attackers to create and overwrite arbitrary files via the (1) SaveFile and (2) ExportToXML methods.","Type":"Description","Title":"CVE-2009-0301"},{"CveYear":"2009","CveId":"301","Ordinal":"2","NoteData":"2009-01-27","Type":"Other","Title":"Published"},{"CveYear":"2009","CveId":"301","Ordinal":"3","NoteData":"2017-09-28","Type":"Other","Title":"Modified"}]}}}