« Volver al listado

CVE-2009-5076

Estado: ModificadaAlta (7.5)—

CRE Loaded before 6.2.14, and possibly other versions before 6.3.x, allows remote attackers to bypass authentication and gain administrator privileges via a request with (1) login.php or (2) password_forgotten.php appended as the PATH_INFO, which bypasses a check that uses PHP_SELF, which is not properly handled by (a) includes/application_top.php and (b) admin/includes/application_top.php, as exploited in the wild in 2009.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Creloaded — CRE Loaded

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2009-5076",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": true,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2011-06-08T10:36:12.543",
  "references": [
    {
      "url": "http://hosting-4-creloaded.com/node/116",
      "tags": [
        "Exploit",
        "URL Repurposed"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://www.creloaded.com/fdm_file_detail.php?file_id=191",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://hosting-4-creloaded.com/node/116",
      "tags": [
        "Exploit",
        "URL Repurposed"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.creloaded.com/fdm_file_detail.php?file_id=191",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-287"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "CRE Loaded before 6.2.14, and possibly other versions before 6.3.x, allows remote attackers to bypass authentication and gain administrator privileges via a request with (1) login.php or (2) password_forgotten.php appended as the PATH_INFO, which bypasses a check that uses PHP_SELF, which is not properly handled by (a) includes/application_top.php and (b) admin/includes/application_top.php, as exploited in the wild in 2009."
    },
    {
      "lang": "es",
      "value": "CRE Loaded anterior a v6.2.14, y posiblemente otras versiones anteriores a v6.3.x, permite a atacantes remotos evitar la autenticación y obtener privilegios de administrador a través de una solicitud con (1)login.php o (2) password_forgotten.php añadidas como PATH_INFO, que pasa por alto  un control que usa PHP_SELF, que no se maneja de forma adecuada por (a) include/application_top.php y (b) /includes/application_top.php, como los explotados en 2009."
    }
  ],
  "lastModified": "2026-06-16T23:14:56.857",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:creloaded:cre_loaded:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "43D4E801-8F7D-49F5-8F84-2BFAAEF58F66",
              "versionEndIncluding": "6.2"
            },
            {
              "criteria": "cpe:2.3:a:creloaded:cre_loaded:6.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "502C35C3-9E3F-423C-890B-A370777E7E1D"
            },
            {
              "criteria": "cpe:2.3:a:creloaded:cre_loaded:6.15:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1FC35A97-BAE9-41C9-A8F2-45F0E26ED700"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}