CVE-2008-4245 in CMSinfo

Summary

The Admin Control Panel in Rianxosencabos CMS 0.9 does not require administrator privileges, which allows remote authenticated users to (1) change a user s privileges, (2) delete a user account, or perform unspecified other administrative actions via vectors involving an admin lista action to the default URI, possibly related to useradmin.php.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Reservation

09/25/2008

Disclosure

09/25/2008

CPE

ready

Exploit

Download

CVSS

6.3

EPSS

0.03779

Activities

Very Low

Sources

Do you know our Splunk app?

Download it now for free!