CVE-2009-5077

CRE Loaded before 6.2.14 allows remote attackers to bypass authentication and gain administrator privileges via vectors related to a modified PHP_SELF…

published June 8, 2011

CVSS
—
EPSS
1%
Percentile
73.8
In the wild
Unconfirmed
What it is

CRE Loaded before 6.2.14 allows remote attackers to bypass authentication and gain administrator privileges via vectors related to a modified PHP_SELF variable, which is not properly handled by (1) includes/application_top.php and (2) admin/includes/application_top.php.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01486 · 73.8th percentile
Published
2011-06-08T15:00Z
EPSS history
Timeline
  • 08 JUN 15:00Z
    CRE Loaded before 6.2.14 allows remote attackers to bypass authentication and gain administrator privileges via vectors related to a modified PHP_SELF…
    cvelistv5