CVE-2008-2987: Multiple cross-site scripting (XSS) vulnerabilities in Benja CMS 0.1 allow remote attackers to inject arbit...

Security readout for executives and security teams

CVE-2008-2987 is a reported cross-site scripting issue in Benja CMS 0.1. A remote attacker could inject script or HTML through URL path information handled by three PHP files under the admin directory. The source bundle does not provide a CVSS score, patch, or evidence of active exploitation. Exposure is likely limited to organizations still running Benja CMS 0.1, especially if the CMS or its admin paths are reachable from untrusted networks. The bundle lists no CPEs or broader product versions, so asset matching may require manual application inventory review. Treat this as a legacy-application exposure check rather than an emergency based on the supplied evidence. Prioritize quickly confirming whether Benja CMS 0.1 exists in the environment. If found, isolate, retire, or obtain vendor guidance because the bundle provides no confirmed patch details. Mitigation focus: Check vendor or project guidance for any available fixed release or workaround.; Retire or replace Benja CMS 0.1 if it is still in use.; Restrict access to Benja CMS administrative paths to trusted users and networks..

Prepared

Jun 28, 2026, 18:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.