CVE

Id
42511  
CVE No.
CVE-2009-5076  
Status
Candidate  
Description
CRE Loaded before 6.2.14, and possibly other versions before 6.3.x, allows remote attackers to bypass authentication and gain administrator privileges via a request with (1) login.php or (2) password_forgotten.php appended as the PATH_INFO, which bypasses a check that uses PHP_SELF, which is not properly handled by (a) includes/application_top.php and (b) admin/includes/application_top.php, as exploited in the wild in 2009.  
Phase
Assigned (20110607)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
463092 42511 CVE-2009-5076 MISC:http://hosting-4-creloaded.com/node/116  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
33584 JVNDB-2011-003826 GNU troff の contrib/eqn2graph/eqn2graph.sh などのスクリプトにおける任意のファイルを上書きされる脆弱性 GNU troff の contrib/eqn2graph/eqn2graph.sh、contrib/grap2graph/grap2graph.sh および contrib/pic2graph/pic2graph.sh スクリプトには、一時ディレクトリを作成の特定の失敗を適切に処理しないため、任意のファイルを上書きされる脆弱性が存在します。 CVE-2009-5080 42511 3.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-003826.html  View