PT-2008-4318 · Benja · Benja Cms

Published 2008-06-26 · Updated 2018-10-11 · CVE-2008-2879

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions Benja CMS version 0.1

Description The issue allows remote attackers to access the admin panel without authentication, enabling them to add or delete menus.

Recommendations For Benja CMS version 0.1, consider implementing proper authentication mechanisms for the admin panel to prevent unauthorized access. As a temporary workaround, restrict access to the admin/ directory until a proper fix is available.

Exploit

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2008-2879

Affected Products

Benja Cms

References · 5

• 🔥 http://securityfocus.com/bid/29884 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-2879 · Security Note
• http://secunia.com/advisories/30834 · Vendor Advisory
• http://securityreason.com/securityalert/3958 · Note
• http://securityfocus.com/archive/1/493568/100/0/threaded · Note