PT-2006-1544 · Cre Loaded · Cre Loaded

Security Curmudgeonjericho · Publicado 2006-01-31 · Atualizado 2017-07-20 · CVE-2006-0478

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions CRE Loaded versions 6.0x through 6.1x

Description The issue allows remote attackers to perform privileged actions, including uploading and creating arbitrary files, via a direct request to "files.php". The vendor encourages users to modify their installations as soon as possible.

Recommendations For CRE Loaded versions 6.0x through 6.1x, apply the patch provided by the vendor to close the vulnerability. As a temporary workaround, consider restricting access to the "files.php" file until the patch is applied.

Exploit

Correção

Identificadores relacionados

CVE-2006-0478

Produtos afetados

Cre Loaded

Referências · 8

• 🔥 https://exploit-db.com/exploits/1446 · Exploit
• http://secunia.com/advisories/18648 · Aviso do Fabricante
• http://osvdb.org/22793 · Nota
• http://attrition.org/pipermail/vim/2006-February/000527.html · Nota
• http://securityfocus.com/bid/16415 · Correção
• http://vupen.com/english/advisories/2006/0373 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24377 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-0478 · Nota de Segurança