CVE-2008-4245

The Admin Control Panel in Rianxosencabos CMS 0.9 does not require administrator privileges, which allows remote authenticated users to (1) change a user's privileges, (2) delete a user account, or perform unspecified other administrative actions via vectors involving an admin lista action to the default URI, possibly related to useradmin.php.

Link	Resource
http://www.securityfocus.com/bid/31296	Exploit
http://securityreason.com/securityalert/4311
https://exchange.xforce.ibmcloud.com/vulnerabilities/45290
https://www.exploit-db.com/exploits/6513

Configuration 1

cpe:2.3:a:rianxosencabos_cms:rianxosencabos_cms:0.9:*:*:*:*:*:*:*

---

Published : 2008-09-25 07:25

Updated : 2017-09-29 01:32

---

NVD link : CVE-2008-4245

Mitre link : CVE-2008-4245

No products.

CWE-264