Vulnerabilities

TI-2008-02862 CVE-2008-2988 · GHSA-wq2c-7m9f-vjwv

Unrestricted file upload vulnerability in admin/upload.php in Benja CMS 0.1 allows remote…

LOW 36

Unrestricted file upload vulnerability in admin/upload.php in Benja CMS 0.1 allows remote attackers to upload and execute arbitrary PHP files via unspecified vectors, followed by a direct request to the file in billeder/…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01524 Published 2008-07-02 No fix listed CWE-20

TI-2008-02861 CVE-2008-2987 · GHSA-mc7m-8hwv-hq4r

Multiple cross-site scripting (XSS) vulnerabilities in Benja CMS 0.1 allow remote…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in Benja CMS 0.1 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) admin_edit_submenu.php, (2) admin_new_submenu.php, and (3) admin…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0154 Published 2008-07-02 No fix listed CWE-79

TI-2008-02753 CVE-2008-2879 · GHSA-q3wm-x327-jm28

Benja CMS 0.1 does not require authentication for access to admin/, which allows remote…

LOW 32

Benja CMS 0.1 does not require authentication for access to admin/, which allows remote attackers to add or delete a menu.

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.01528 Published 2008-06-26 No fix listed CWE-287

Vulnerabilities

Filters

Unrestricted file upload vulnerability in admin/upload.php in Benja CMS 0.1 allows remote…

Multiple cross-site scripting (XSS) vulnerabilities in Benja CMS 0.1 allow remote…

Benja CMS 0.1 does not require authentication for access to admin/, which allows remote…