CVE-2006-0478
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2006-0478
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
CRE Loaded 6.15 allows remote attackers to perform privileged actions, including uploading and creating arbitrary files, via a direct request to files.php. NOTE: the vendor states "The initial announcement of this risk was made on our website... and it included a patch which will close the vulnerability on all known 6.0x and 6.1x releases. We strongly encourage users of CRE Loaded 6.x, osCMax, and other users of osCommerce who have installed HTMLArea based WYSIWYG editors and Admin Access with Levels to modify thier installations at the earliest possible moment."
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
CRE Loaded Files.PHP访问验证漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
CRE Loaded 6.15访问验证漏洞，远程攻击者可以通过直接请求files.php执行具有特权的操作，包括上传和创建任意文件。注意：供应商声称"在我们的网站上最初已公布了此风险...并且网站上还提供了补丁程序，将用于关闭所有已知6.0x和6.1x发行版上的漏洞。我们强烈建议已安装基于HTMLArea的WYSIWYG编辑器和Admin Access with Levels的CRE Loaded 6.x、osCMax和其他osCommerce用户尽早修改安装"。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2006-0478
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2006-0478
请登录查看更多情报信息。
Same Patch Batch · n/a · 2006-01-31 · 18 CVEs total
| CVE-2006-0473 | My Little Homepage产品 BBCode 跨站脚本攻击漏洞 | |
| CVE-2006-0467 | Pioneers 未明漏洞 | |
| CVE-2006-0043 | NFS-SERVER远程缓冲区溢出漏洞 | |
| CVE-2006-0480 | sPaiz-Nuke Modules.PHP跨站脚本攻击漏洞 | |
| CVE-2006-0479 | PmWiki多个输入验证漏洞 | |
| CVE-2006-0477 | GIT 缓冲区溢出漏洞 | |
| CVE-2006-0476 | Nullsoft Winamp畸形播放列表文件处理远程缓冲区溢出漏洞 | |
| CVE-2006-0475 | PHP-Ping 拒绝服务漏洞 | |
| CVE-2006-0474 | Shareaza 多个整数溢出漏洞 | |
| CVE-2006-0483 | Cisco VPN 3000集中器态异常的HTTP/TCP数据包拒绝服务漏洞 | |
| CVE-2006-0472 | My Little Homepage产品BBCode链接标记脚本注入漏洞 | |
| CVE-2006-0471 | My Little Homepage 跨站脚本攻击漏洞 | |
| CVE-2006-0470 | MyBB 跨站脚本攻击漏洞 | |
| CVE-2005-4676 | Andreas Huggel Exiv2损坏EXIF数据拒绝服务漏洞 | |
| CVE-2006-0481 | Libpng Graphics Library PNG_Set_Strip_Alpha缓冲区溢出漏洞 | |
| CVE-2006-0482 | Linux Kernel Get_Compat_Timespec和PTrace本地拒绝服务漏洞 | |
| CVE-2006-0484 | Elido Face Control 目录遍历漏洞 |
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-8276
bettercap MySQL Server mysql_server.go integer coercion - CVE-2026-8275
bettercap zerogod IPP Service zerogod_ipp_primitives.go ippR - CVE-2026-8270
Open5GS SMF ogs_nas_parse_qos_rules denial of service - CVE-2026-8269
Open5GS SMF smf_nsmf_handle_create_sm_context denial of serv - CVE-2026-8268
Open5GS SMF OpenAPI_list_create denial of service
V. Comments for CVE-2006-0478
No comments yet