Benjacms

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Benjacms records in CISA KEV

No Benjacms vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Benja Cms 3 records LOW

Records

3 records in Benja Cms · all components

TI-2008-02862 CVE-2008-2988 · GHSA-wq2c-7m9f-vjwv

Unrestricted file upload vulnerability in admin/upload.php in Benja CMS 0.1 allows remote…

LOW 36

Unrestricted file upload vulnerability in admin/upload.php in Benja CMS 0.1 allows remote attackers to upload and execute arbitrary PHP files via unspecified vectors, followed by a direct request to the file in billeder/…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01524 Published 2008-07-02 No fix listed CWE-20

TI-2008-02753 CVE-2008-2879 · GHSA-q3wm-x327-jm28

Benja CMS 0.1 does not require authentication for access to admin/, which allows remote…

LOW 32

Benja CMS 0.1 does not require authentication for access to admin/, which allows remote attackers to add or delete a menu.

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.01528 Published 2008-06-26 No fix listed CWE-287

TI-2008-02861 CVE-2008-2987 · GHSA-mc7m-8hwv-hq4r

Multiple cross-site scripting (XSS) vulnerabilities in Benja CMS 0.1 allow remote…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in Benja CMS 0.1 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) admin_edit_submenu.php, (2) admin_new_submenu.php, and (3) admin…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0154 Published 2008-07-02 No fix listed CWE-79

Open these records in search →

Critical	0
High	1
Medium	2
Low	0
No CVSS	0