VULNERABILITY INTELLIGENCE

CVE-2008-2879

CVSS score6.4 MEDIUM
EPSS probability1.53%
CISA KEVNot currently listed
Published2008-06-26
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:P/A:P

Description

Benja CMS 0.1 does not require authentication for access to admin/, which allows remote attackers to add or delete a menu.

Weakness classification

  • CWE-287: Improper Authentication

Primary references