CVE-2008-5708

EPSS 2.6%

redirect.php in SlimCMS 1.0.0 does not require authentication, which allows remote attackers to create administrative users by using the newusername and newpassword parameters and setting the newisadmin parameter to 1.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/6729unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://securityreason.com/securityalert/4804 https://exchange.xforce.ibmcloud.com/vulnerabilities/45824 https://www.exploit-db.com/exploits/6729 http://www.securityfocus.com/bid/31736