CVE-2008-2558: Undefined Security Weakness

CRE Loaded 6.2.13.1 and earlier does not set the "Secure" attribute for cookies that are sent over HTTPS, which might allow remote attackers to sniff the cookies if they are sent over HTTP...

CVE-2008-2557: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in CRE Loaded 6.2.13.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 Links and 2 Links Submit pages...

Hardcoded credentials

CRE Loaded 6.15 allows remote attackers to perform privileged actions, including uploading and creating arbitrary files, via a direct request to files.php. NOTE: the vendor states "The initial announcement of this risk was made on our website... and it included a patch which will close the...

CVE-2006-0478

CRE Loaded 6.15 allows remote attackers to perform privileged actions, including uploading and creating arbitrary files, via a direct request to files.php. NOTE: the vendor states "The initial announcement of this risk was made on our website... and it included a patch which will close the...

CVE-2006-0478

CRE Loaded 6.15 allows remote attackers to perform privileged actions, including uploading and creating arbitrary files, via a direct request to files.php. NOTE: the vendor states "The initial announcement of this risk was made on our website... and it included a patch which will close the...

CVE-2006-0478

CRE Loaded 6.15 is affected by CVE-2006-0478, where remote attackers can perform privileged actions—including uploading and creating arbitrary files—by sending a direct request to files.php. The vulnerability’s root cause is described through the vendor’s note that a patch exists to close the iss...

CVE-2006-0478: Undefined Security Weakness

CRE Loaded 6.15 allows remote attackers to perform privileged actions, including uploading and creating arbitrary files, via a direct request to files.php. NOTE: the vendor states "The initial announcement of this risk was made on our website... and it included a patch which will close the...

[SA18648] CRE Loaded "files.php" File Upload Security Issue

TITLE: CRE Loaded "files.php" File Upload Security Issue SECUNIA ADVISORY ID: SA18648 VERIFY ADVISORY: http://secunia.com/advisories/18648/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: CRE Loaded 6.x http://secunia.com/product/7173/ DESCRIPTION: kaneda has discover...