PT-2006-1544 · Cre Loaded · Cre Loaded

Security Curmudgeonjericho · Published 2006-01-31 · Updated 2017-07-20 · CVE-2006-0478

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions CRE Loaded versions 6.0x through 6.1x

Description The issue allows remote attackers to perform privileged actions, including uploading and creating arbitrary files, via a direct request to "files.php". The vendor encourages users to modify their installations as soon as possible.

Recommendations For CRE Loaded versions 6.0x through 6.1x, apply the patch provided by the vendor to close the vulnerability. As a temporary workaround, consider restricting access to the "files.php" file until the patch is applied.

Exploit

Fix

Related Identifiers

CVE-2006-0478

Affected Products

Cre Loaded

References · 8

• 🔥 https://exploit-db.com/exploits/1446 · Exploit
• http://secunia.com/advisories/18648 · Vendor Advisory
• http://securityfocus.com/bid/16415 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2006-0478 · Security Note
• http://osvdb.org/22793 · Note
• http://attrition.org/pipermail/vim/2006-February/000527.html · Note
• http://vupen.com/english/advisories/2006/0373 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24377 · Note