CVE-2008-6553

microcms-admin-home.php in Implied by Design Micro CMS (Micro-CMS) 3.5 (aka 0.3.5) does not require authentication as an administrator, which allows remote…

published March 30, 2009

CVSS
—
EPSS
2%
Percentile
84.3
In the wild
Unconfirmed
What it is

microcms-admin-home.php in Implied by Design Micro CMS (Micro-CMS) 3.5 (aka 0.3.5) does not require authentication as an administrator, which allows remote attackers to (1) create administrative accounts via an add_admin action, (2) remove administrative accounts via a delete_admin action, and (3) modify administrative passwords via a change_password action.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02470 · 84.3th percentile
Published
2009-03-30T16:00Z
EPSS history
Timeline
  • 30 MAR 16:00Z
    microcms-admin-home.php in Implied by Design Micro CMS (Micro-CMS) 3.5 (aka 0.3.5) does not require authentication as an administrator, which allows remote…
    cvelistv5