CVEvulnerability
CVE-2008-5708
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-12-24
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-287
Description
redirect.php in SlimCMS 1.0.0 does not require authentication, which allows remote attackers to create administrative users by using the newusername and newpassword parameters and setting the newisadmin parameter to 1.
Affected configurations
• slimcms slimcms 1.0.0
Related
Weakness · CWE (1)
- CWE-287 Improper Authentication weakness
References
- http://securityreason.com/securityalert/4804 securityreason.com
- http://www.securityfocus.com/bid/31736 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45824 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/6729 www.exploit-db.com
- http://securityreason.com/securityalert/4804 securityreason.com
- http://www.securityfocus.com/bid/31736 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45824 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/6729 www.exploit-db.com