CVE-2008-4245 | BDVDB-2026-32547 Detail

Description#

The Admin Control Panel in Rianxosencabos CMS 0.9 does not require administrator privileges, which allows remote authenticated users to (1) change a user's privileges, (2) delete a user account, or perform unspecified other administrative actions via vectors involving an admin lista action to the default URI, possibly related to useradmin.php.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/31296
https://exchange.xforce.ibmcloud.com/vulnerabilities/45290
https://www.exploit-db.com/exploits/6513
http://securityreason.com/securityalert/4311

Exploit#

https://www.exploit-db.com/exploits/6513

History#

Version 12008-09-25Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.