Description
Benja CMS 0.1 does not require authentication for access to admin/, which allows remote attackers to add or delete a menu.
References
- 20080622 Benja CMS 0.1 (Upload/XSS) Multiple Remote Vulnerabilities mailing-list
- 3958 third-party-advisory
- 30834 third-party-advisory
- 29884 vdb-entry