CVE-2006-0478

CRE Loaded 6.15 allows remote attackers to perform privileged actions, including uploading and creating arbitrary files, via a direct request to files.php. NOTE: the vendor states "The initial announcement of this risk was made on our website... and it included a patch which will close the vulnerability on all known 6.0x and 6.1x releases. We strongly encourage users of CRE Loaded 6.x, osCMax, and other users of osCommerce who have installed HTMLArea based WYSIWYG editors and Admin Access with Levels to modify thier installations at the earliest possible moment."

CVSS v2.0 7.5 HIGH

7.5^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://secunia.com/advisories/18648	Patch Vendor Advisory
http://www.attrition.org/pipermail/vim/2006-February/000527.html
http://www.osvdb.org/22793
http://www.securityfocus.com/bid/16415	Patch
http://www.vupen.com/english/advisories/2006/0373
https://exchange.xforce.ibmcloud.com/vulnerabilities/24377

Configurations

Configuration 1 (hide)

cpe:2.3:a:cre_loaded:cre_loaded:6.15:*:*:*:*:*:*:*

History

No history.

Information

Published : 2006-01-31 11:03

Updated : 2023-12-10 10:28

NVD link : CVE-2006-0478

Mitre link : CVE-2006-0478

CVE.ORG link : CVE-2006-0478

JSON object : View

Products Affected

cre_loaded

cre_loaded

CWE

NVD-CWE-Other

{"id": "CVE-2006-0478", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": true, "userInteractionRequired": false}]}, "published": "2006-01-31T11:03:00.000", "references": [{"url": "http://secunia.com/advisories/18648", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.attrition.org/pipermail/vim/2006-February/000527.html", "source": "cve@mitre.org"}, {"url": "http://www.osvdb.org/22793", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/16415", "tags": ["Patch"], "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2006/0373", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24377", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "CRE Loaded 6.15 allows remote attackers to perform privileged actions, including uploading and creating arbitrary files, via a direct request to files.php. NOTE: the vendor states \"The initial announcement of this risk was made on our website... and it included a patch which will close the vulnerability on all known 6.0x and 6.1x releases. We strongly encourage users of CRE Loaded 6.x, osCMax, and other users of osCommerce who have installed HTMLArea based WYSIWYG editors and Admin Access with Levels to modify thier installations at the earliest possible moment.\""}], "lastModified": "2017-07-20T01:29:48.050", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:cre_loaded:cre_loaded:6.15:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6BA36001-033F-40FA-8795-58D79888B0F5"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}