What’s Vulnerable › Vulnerabilities
CVE-2009-5077
- Severity: high (CVSS 7.5 v2.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.5% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2011-06-08 · updated 2026-06-16
- Weakness: CWE-287
Description
CRE Loaded before 6.2.14 allows remote attackers to bypass authentication and gain administrator privileges via vectors related to a modified PHP_SELF variable, which is not properly handled by (1) includes/application_top.php and (2) admin/includes/application_top.php.
Affected products
- Creloaded Cre Loaded: through 6.2; 6.15
References
Get alerted when CVE-2009-5077 or the next vulnerability affects your stack