CVE-2008-5708

redirect.php in SlimCMS 1.0.0 does not require authentication, which allows remote attackers to create administrative users by using the newusername and newpassword parameters and setting the newisadmin parameter to 1.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 82%
VendorProductVersion
slimcmsslimcms
1.0.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://securityreason.com/securityalert/4804
http://www.securityfocus.com/bid/31736
https://exchange.xforce.ibmcloud.com/vulnerabilities/45824
https://www.exploit-db.com/exploits/6729
http://securityreason.com/securityalert/4804
http://www.securityfocus.com/bid/31736
https://exchange.xforce.ibmcloud.com/vulnerabilities/45824
https://www.exploit-db.com/exploits/6729