CVE-2008-2879

EUVD-2008-2872
Benja CMS 0.1 does not require authentication for access to admin/, which allows remote attackers to add or delete a menu.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.4 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:N/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 70%
Affected Products (NVD)
VendorProductVersion
benjacmsbenja_cms
0.1
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://secunia.com/advisories/30834
http://securityreason.com/securityalert/3958
http://www.securityfocus.com/archive/1/493568/100/0/threaded
http://www.securityfocus.com/bid/29884
http://secunia.com/advisories/30834
http://securityreason.com/securityalert/3958
http://www.securityfocus.com/archive/1/493568/100/0/threaded
http://www.securityfocus.com/bid/29884