CVE-2008-6553
published 2009-03-30CVE-2008-6553: microcms-admin-home.php in Implied by Design Micro CMS (Micro-CMS) 3.5 (aka 0.3.5) does not require authentication as an administrator, which allows remote…
PriorityP348high7.5CVSS 2.0
AVNACLAuNCPIPAP
EXPLOIT
EPSS
2.47%
82.5th percentile
microcms-admin-home.php in Implied by Design Micro CMS (Micro-CMS) 3.5 (aka 0.3.5) does not require authentication as an administrator, which allows remote attackers to (1) create administrative accounts via an add_admin action, (2) remove administrative accounts via a delete_admin action, and (3) modify administrative passwords via a change_password action.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| impliedbydesign | micro-cms | <= 0.3.5 | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No writeups or analysis indexed.
http://downloads.securityfocus.com/vulnerabilities/exploits/32063.plhttp://www.securityfocus.com/bid/32063https://exchange.xforce.ibmcloud.com/vulnerabilities/46294https://www.exploit-db.com/exploits/6933http://downloads.securityfocus.com/vulnerabilities/exploits/32063.plhttp://www.securityfocus.com/bid/32063https://exchange.xforce.ibmcloud.com/vulnerabilities/46294https://www.exploit-db.com/exploits/6933
2009-03-30
Published