CVE-2008-2879

Benja CMS 0.1 does not require authentication for access to admin/, which allows remote attackers to add or delete a menu.