Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
CRE Loaded 6.15 allows remote attackers to perform privileged actions, including uploading and creating arbitrary files, via a direct request to files.php. NOTE: the vendor states "The initial announcement of this risk was made on our website... and it included a patch which will close the vulnerability on all known 6.0x and 6.1x releases. We strongly encourage users of CRE Loaded 6.x, osCMax, and other users of osCommerce who have installed HTMLArea based WYSIWYG editors and Admin Access with Levels to modify thier installations at the earliest possible moment."
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
CRE Loaded Files.PHP访问验证漏洞
Vulnerability Description
CRE Loaded 6.15访问验证漏洞，远程攻击者可以通过直接请求files.php执行具有特权的操作，包括上传和创建任意文件。注意：供应商声称"在我们的网站上最初已公布了此风险...并且网站上还提供了补丁程序，将用于关闭所有已知6.0x和6.1x发行版上的漏洞。我们强烈建议已安装基于HTMLArea的WYSIWYG编辑器和Admin Access with Levels的CRE Loaded 6.x、osCMax和其他osCommerce用户尽早修改安装"。
CVSS Information
N/A
Vulnerability Type
N/A