PT-2008-4318 · Benja · Benja Cms

Publicado 2008-06-26 · Atualizado 2018-10-11 · CVE-2008-2879

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions Benja CMS version 0.1

Description The issue allows remote attackers to access the admin panel without authentication, enabling them to add or delete menus.

Recommendations For Benja CMS version 0.1, consider implementing proper authentication mechanisms for the admin panel to prevent unauthorized access. As a temporary workaround, restrict access to the admin/ directory until a proper fix is available.

Exploit

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2008-2879

Produtos afetados

Benja Cms

Referências · 5

• 🔥 http://securityfocus.com/bid/29884 · Exploit
• http://securityreason.com/securityalert/3958 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-2879 · Nota de Segurança
• http://securityfocus.com/archive/1/493568/100/0/threaded · Nota
• http://secunia.com/advisories/30834 · Aviso do Fabricante