CVE-2009-5077
08.06.2011, 15:55
CRE Loaded before 6.2.14 allows remote attackers to bypass authentication and gain administrator privileges via vectors related to a modified PHP_SELF variable, which is not properly handled by (1) includes/application_top.php and (2) admin/includes/application_top.php.Enginsight
| Vendor | Product | Version |
|---|---|---|
| creloaded | cre_loaded | 𝑥 ≤ 6.2 |
| creloaded | cre_loaded | 6.15 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration