VYPR
← All advisories
Unrated severityNVD Advisory· Published Sep 25, 2008· Updated Jun 16, 2026

CVE-2008-4245

CVE-2008-4245

Description

The Admin Control Panel in Rianxosencabos CMS 0.9 does not require administrator privileges, which allows remote authenticated users to (1) change a user's privileges, (2) delete a user account, or perform unspecified other administrative actions via vectors involving an admin lista action to the default URI, possibly related to useradmin.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Rianxosencabos CMS/CMS2 versions
    cpe:2.3:a:rianxosencabos_cms:rianxosencabos_cms:0.9:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:rianxosencabos_cms:rianxosencabos_cms:0.9:*:*:*:*:*:*:*
    • (no CPE)range: =0.9

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.