CVE-2008-4245 - CVE House
Back to Database
Status published Medium CVE-2008-4245

The Admin Control Panel in Rianxosencabos CMS 0.9 does not...

Vulnerability Description

The Admin Control Panel in Rianxosencabos CMS 0.9 does not require administrator privileges, which allows remote authenticated users to (1) change a user's privileges, (2) delete a user account, or perform unspecified other administrative actions via vectors involving an admin lista action to the default URI, possibly related to useradmin.php.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2008-4245

Credits & Attribution

No credits recorded in the NVD database.

References

More from rianxosencabos cms

View All →
CVE-2008-6014
SQL injection vulnerability in scripts/links.php in Rianxosencabos CMS 0.9 allows...
High 7.5
CVE-2008-4244
Rianxosencabos CMS 0.9 allows remote attackers to bypass authentication and...
High 7.5

Affected Vendor

rianxosencabos cms

View all reports →

Affected Software

rianxosencabos cms
Vulnerable Versions:
0.9

Timeline

Official Publish: September 25th, 2008
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.