redirect.php in SlimCMS 1.0.0 does not require authentication, which allows remote attackers to create administrative users by using the newusername and newpassword parameters and setting the newisadmin parameter to 1.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2008-12-24T17:00:00

Updated: 2024-08-07T11:04:43.763Z

Reserved: 2008-12-24T00:00:00

Link: CVE-2008-5708

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2008-12-24T18:29:15.767

Modified: 2024-11-21T00:54:42.230

Link: CVE-2008-5708

cve-icon Redhat

No data.