CVE-2009-5077

HIGH 7.5CVE-2009-5077 · Published 08/06/2011 · updated 16/06/2026

In short

CVE-2009-5077 is a HIGH (CVSS 7.5) vulnerability affecting cre loaded (creloaded).
Chance of exploitation in the next 30 days (EPSS): 1.5%, higher than 74.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
cre loaded creloaded	`= 6.15≤ 6.2`	No fix yet

Description

CRE Loaded before 6.2.14 allows remote attackers to bypass authentication and gain administrator privileges via vectors related to a modified PHP_SELF variable, which is not properly handled by (1) includes/application_top.php and (2) admin/includes/application_top.php.

References

hosting-4-creloaded.com/node/116 · Exploit

More vulnerabilities in cre loaded

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free