CVE-2008-4245

Loading...

General

Score:6.5/10.0
Severity:Medium
Category:Access Control Error
Exploit:Available

Impact Metrics

Confidentiality:Partial
Integrity:Partial
Availability:Partial

Exploitability Metrics

Access Vector:Network
Access Complexity:Low
Authentication:Single

Published on 25/09/08 - Updated on 29/09/17

Description

The Admin Control Panel in Rianxosencabos CMS 0.9 does not require administrator privileges, which allows remote authenticated users to (1) change a user's privileges, (2) delete a user account, or perform unspecified other administrative actions via vectors involving an admin lista action to the default URI, possibly related to useradmin.php.

Category: Access Control Error

CWE-264 (Permissions, Privileges, and Access Control)
Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.

Security Notices

US National Vulnerability DatabaseCVE-2008-4245

Exploits

Exploit-DBEDB-6513
SecurityFocusBID-31296

Relative technologies

VendorProduct
rianxosencabos_cmsrianxosencabos_cms

Share this vulnerability with:

Twitter Facebook LinkedIn Mail