ID de Prueba:	1.3.6.1.4.1.25623.1.0.802104
Categoría:	Web application abuses
Título:	CRE Loaded Multiple Security Bypass Vulnerabilities
Resumen:	CRE Loaded is prone to a security bypass vulnerability.
Descripción:	Summary: CRE Loaded is prone to a security bypass vulnerability. Vulnerability Insight: The flaws are due to - An error when handling 'PHP_SELF' variable, by includes/application_top.php and admin/includes/application_top.php. - Request, with 'login.php' or 'password_forgotten.php' appended as the 'PATH_INFO', which bypasses a check that uses 'PHP_SELF', which is not properly handled by includes/application_top.php and admin/includes/application_top.php. Vulnerability Impact: Successful exploitation will allow attacker to bypass authentication and gain administrator privileges. Affected Software/OS: CRE Loaded version before 6.4.0 Solution: Upgrade to CRE Loaded version 6.4.0 or later CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2009-5076 http://hosting-4-creloaded.com/node/116 Common Vulnerability Exposure (CVE) ID: CVE-2009-5077
Copyright	Copyright (C) 2011 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.