https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 13:12:55 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-163656 EUVD-2026-163656 https://cve.radiocsirt.org/vuln/euvd-2026-163656 https://cve.radiocsirt.org/vuln/fkie_cve-2009-5076 <p>CRE Loaded before 6.2.14, and possibly other versions before 6.3.x, allows remote attackers to bypass authentication and gain administrator privileges via a request with (1) login.php or (2) password_forgotten.php appended as the PATH_INFO, which bypasses a check that uses PHP_SELF, which is not properly handled by (a) includes/application_top.php and (b) admin/includes/application_top.php, as exploited in the wild in 2009.</p> <p>CRE Loaded before 6.2.14, and possibly other versions before 6.3.x, allows remote attackers to bypass authentication and gain administrator privileges via a request with (1) login.php or (2) password_forgotten.php appended as the PATH_INFO, which bypasses a check that uses PHP_SELF, which is not properly handled by (a) includes/application_top.php and (b) admin/includes/application_top.php, as exploited in the wild in 2009.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2009-5076 https://cve.radiocsirt.org/vuln/ghsa-x6gv-2r2j-q73m <p>CRE Loaded before 6.2.14, and possibly other versions before 6.3.x, allows remote attackers to bypass authentication and gain administrator privileges via a request with (1) login.php or (2) password_forgotten.php appended as the PATH_INFO, which bypasses a check that uses PHP_SELF, which is not properly handled by (a) includes/application_top.php and (b) admin/includes/application_top.php, as exploited in the wild in 2009.</p> <p>CRE Loaded before 6.2.14, and possibly other versions before 6.3.x, allows remote attackers to bypass authentication and gain administrator privileges via a request with (1) login.php or (2) password_forgotten.php appended as the PATH_INFO, which bypasses a check that uses PHP_SELF, which is not properly handled by (a) includes/application_top.php and (b) admin/includes/application_top.php, as exploited in the wild in 2009.</p> https://cve.radiocsirt.org/vuln/ghsa-x6gv-2r2j-q73m https://cve.radiocsirt.org/vuln/gsd-2009-5076 gsd-2009-5076 https://cve.radiocsirt.org/vuln/gsd-2009-5076