Authentication flaw

2008-12-2418:29:00

PRIOn knowledge base

www.prio-n.com

7.3 High

AI Score

Confidence

Low

0.018 Low

EPSS

Percentile

88.2%

JSON

redirect.php in SlimCMS 1.0.0 does not require authentication, which allows remote attackers to create administrative users by using the newusername and newpassword parameters and setting the newisadmin parameter to 1.

CPENameOperatorVersion
slimcmseq1.0.0

CPE	Name	Operator	Version
	slimcms	eq	1.0.0

References

securityreason.com/securityalert/4804

www.securityfocus.com/bid/31736

exchange.xforce.ibmcloud.com/vulnerabilities/45824

www.exploit-db.com/exploits/6729