CRE Loaded Files.PHP Access Validation Vulnerability
BID:16415
Info
CRE Loaded Files.PHP Access Validation Vulnerability
| Bugtraq ID: | 16415 |
| Class: | Access Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 30 2006 12:00AM |
| Updated: | Feb 07 2006 08:56PM |
| Credit: | kaneda is credited with the discovery of this vulnerability. |
| Vulnerable: |
Chain Reaction Edition CRE Loaded 6.15 Chain Reaction Edition CRE Loaded 6.1 Chain Reaction Edition CRE Loaded 6.0 |
| Not Vulnerable: |
Chain Reaction Edition CRE Loaded 6.2 |
Discussion
CRE Loaded Files.PHP Access Validation Vulnerability
CRE Loaded is prone to an access-validation vulnerability. This issue is due to a failure in the application to limit access to administrative sections of the application.
An attacker can exploit this vulnerability to overwrite, delete, and create files and directories in the context of the webserver process. This may result in a loss of confidentiality. The attacker may use this information in further attacks.
This issue is reported to affect CRE Loaded version 6.15; other versions may also be vulnerable.
CRE Loaded is prone to an access-validation vulnerability. This issue is due to a failure in the application to limit access to administrative sections of the application.
An attacker can exploit this vulnerability to overwrite, delete, and create files and directories in the context of the webserver process. This may result in a loss of confidentiality. The attacker may use this information in further attacks.
This issue is reported to affect CRE Loaded version 6.15; other versions may also be vulnerable.
Exploit / POC
CRE Loaded Files.PHP Access Validation Vulnerability
An exploit is not required.
An exploit is not required.
Solution / Fix
CRE Loaded Files.PHP Access Validation Vulnerability
Solution:
The vendor has released version 6.2 to address this issue.
Chain Reaction Edition CRE Loaded 6.1
Chain Reaction Edition CRE Loaded 6.15
Chain Reaction Edition CRE Loaded 6.0
Solution:
The vendor has released version 6.2 to address this issue.
Chain Reaction Edition CRE Loaded 6.1
-
Chain Reaction Edition CRE Loaded 6.2
http://creloaded.com/Downloads/d_op=getit/lid=172.html
Chain Reaction Edition CRE Loaded 6.15
-
Chain Reaction Edition CRE Loaded 6.2
http://creloaded.com/Downloads/d_op=getit/lid=172.html
Chain Reaction Edition CRE Loaded 6.0
-
Chain Reaction Edition CRE Loaded 6.2
http://creloaded.com/Downloads/d_op=getit/lid=172.html
References
CRE Loaded Files.PHP Access Validation Vulnerability
References:
References:
- CRE Loaded Homepage (Chain Reaction Edition)