CVE-2008-2879 Benja CMS 0.1 does not require authentication for access to admin/, which allows remote attackers to add or delete a menu.
MediumCVSS 6.4
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Benja CMS 0.1 does not require authentication for access to admin/, which allows remote attackers to add or delete a menu.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| benjacms benja cms | = 0.1 | No fix listed |
References
- 30834 third-party-advisory vendor-advisory
- 3958 third-party-advisory
- 20080622 Benja CMS 0.1 (Upload/XSS) Multiple Remote Vulnerabilities mailing-list
- 29884 exploit vdb-entry