Cre Loaded

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Cre Loaded records in CISA KEV

No Cre Loaded vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Cre Loaded 3 records LOW

Records

3 records

TI-2006-00464 CVE-2006-0478 · GHSA-9323-r5qr-4g8x

CRE Loaded 6.15 allows remote attackers to perform privileged actions, including…

LOW 38

CRE Loaded 6.15 allows remote attackers to perform privileged actions, including uploading and creating arbitrary files, via a direct request to files.php.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03068 Published 2006-01-31 No fix listed

TI-2008-02449 CVE-2008-2558 · GHSA-hjc7-v4p9-h3c8

CRE Loaded 6.2.13.1 and earlier does not set the "Secure" attribute for cookies that are…

LOW 25

CRE Loaded 6.2.13.1 and earlier does not set the "Secure" attribute for cookies that are sent over HTTPS, which might allow remote attackers to sniff the cookies if they are sent over HTTP.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01064 Published 2008-06-05 No fix listed CWE-310

TI-2008-02448 CVE-2008-2557 · GHSA-vpv8-wx8m-7j2w

Cross-site scripting (XSS) vulnerability in CRE Loaded 6.2.13.1 and earlier allows remote…

LOW 22

Cross-site scripting (XSS) vulnerability in CRE Loaded 6.2.13.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) Links and (2) Links Submit pages.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01033 Published 2008-06-05 No fix listed CWE-79

Open these records in search →

Critical	0
High	1
Medium	2
Low	0
No CVSS	0