VYPR
← All advisories
Unrated severityNVD Advisory· Published Mar 30, 2009· Updated Jun 16, 2026

CVE-2008-6553

CVE-2008-6553

Description

microcms-admin-home.php in Implied by Design Micro CMS (Micro-CMS) 3.5 (aka 0.3.5) does not require authentication as an administrator, which allows remote attackers to (1) create administrative accounts via an add_admin action, (2) remove administrative accounts via a delete_admin action, and (3) modify administrative passwords via a change_password action.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Impliedbydesign/Micro CMS2 versions
    cpe:2.3:a:impliedbydesign:micro-cms:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:impliedbydesign:micro-cms:*:*:*:*:*:*:*:*range: <=0.3.5
    • (no CPE)range: 3.5

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.