EUVD-2008-2872

Malware in sbrugna...

Authentication flaw

Benja CMS 0.1 does not require authentication for access to admin/, which allows remote attackers to add or delete a menu...

CVE-2008-2879

Benja CMS 0.1 does not require authentication for access to admin/, which allows remote attackers to add or delete a menu...

CVE-2008-2879

Benja CMS 0.1 is affected by an authentication bypass vulnerability: remote attackers can access the admin/ area without credentials and add or delete a menu. The issue is that admin access does not require authentication, enabling modification of menu items. Root cause is insufficient access con...