| Package | Affected versions | Patched versions |
|---|---|---|
| cre loaded | = 6.15≤ 6.2 |
CRE Loaded before 6.2.14 allows remote attackers to bypass authentication and gain administrator privileges via vectors related to a modified PHP_SELF variable, which is not properly handled by (1) includes/application_top.php and (2) admin/includes/application_top.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free