NVD

Id
59216  
Name
CVE-2006-0478  
Description
CRE Loaded 6.15 allows remote attackers to perform privileged actions, including uploading and creating arbitrary files, via a direct request to files.php. NOTE: the vendor states "The initial announcement of this risk was made on our website... and it included a patch which will close the vulnerability on all known 6.0x and 6.1x releases. We strongly encourage users of CRE Loaded 6.x, osCMax, and other users of osCommerce who have installed HTMLArea based WYSIWYG editors and Admin Access with Levels to modify thier installations at the earliest possible moment."  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-01-31  
Modified Date
2011-03-07  
Seq
2006-0478  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
304404 59216 CVE-2006-0478 20060203 vendor ack/fix: 22793: CRE Loaded files.php Unauthenticated Arbitrary File Upload (fwd)  View
304405 59216 CVE-2006-0478 16415  View
304406 59216 CVE-2006-0478 ADV-2006-0373  View
304407 59216 CVE-2006-0478 creloaded-files-auth-bypass(24377)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
61589 JVNDB-2006-003855 CRE Loaded における権限のあるアクションを実行される脆弱性 CRE Loaded には、権限のあるアクションを実行される脆弱性が存在します。 CVE-2006-0478 16580 CVE-2006-0478 59216 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003855.html 2006-01-31 2014-03-11 View