CVE-2008-5708

The CVE-2008-5708 entry concerns SlimCMS 1.0.0, where redirect.php fails to require authentication, enabling an unauthenticated remote attacker to create administrative users by supplying newusername and newpassword with newisadmin=1. Root cause is an authentication bypass in the redirect.php flo...