Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com

CVE-2008-5708

Description

redirect.php in SlimCMS 1.0.0 does not require authentication, which allows remote attackers to create administrative users by using the newusername and newpassword parameters and setting the newisadmin parameter to 1.

POC

Reference

- http://securityreason.com/securityalert/4804

- https://www.exploit-db.com/exploits/6729

Github

No PoCs found on GitHub currently.