Vulnerability Database

313,495

Total vulnerabilities in the database

CVE-2009-5077

CRE Loaded before 6.2.14 allows remote attackers to bypass authentication and gain administrator privileges via vectors related to a modified PHP_SELF variable, which is not properly handled by (1) includes/application_top.php and (2) admin/includes/application_top.php.

  • Published: Jun 8, 2011
  • Updated: Nov 9, 2025
  • CVE: CVE-2009-5077
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 7.5
  • AV:N/AC:L/Au:N/C:P/I:P/A:P

CWEs:

OWASP TOP 10:

Software From Fixed in
creloaded / cre_loaded 6.15 6.15.x
creloaded / cre_loaded - 6.2.x