high7.5Public exploit code
CVE-2008-5708
redirect.php in SlimCMS 1.0.0 does not require authentication, which allows remote attackers to create administrative users by using the newusername and newpas…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- SlimCMS 1.0.0 - 'redirect.php' Privilege Escalation2008-10-10 · webapps · php · Verified
Impact
redirect.php in SlimCMS 1.0.0 does not require authentication, which allows remote attackers to create administrative users by using the newusername and newpassword parameters and setting the newisadmin parameter to 1.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Slimcms | Slimcms | Version 1.0.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://securityreason.com/securityalert/4804
- http://www.securityfocus.com/bid/31736
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45824
- https://www.exploit-db.com/exploits/6729
- http://securityreason.com/securityalert/4804
- http://www.securityfocus.com/bid/31736
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45824
- https://www.exploit-db.com/exploits/6729