CVE-2008-5708: redirect.php in SlimCMS 1.0.0 does not require authentication, which allows remote attackers to create admi...

Security readout for executives and security teams

SlimCMS 1.0.0 has an unauthenticated path that can let an outside attacker create an administrator account. If a public site still runs this version, the business risk is control of the CMS and possible website compromise. The source bundle does not name a vendor patch or supported upgrade path. Exposure appears limited to internet-accessible SlimCMS 1.0.0 deployments. The bundle has no CPE data and lists affected vendor/product as n/a, so asset discovery must confirm the product and version directly. Prioritize as high for any public SlimCMS 1.0.0 site. The issue is old and likely niche, but impact is severe if present because it can grant attacker-level administrative access. Mitigation focus: Identify and inventory any SlimCMS 1.0.0 installations.; Check original vendor or maintainer guidance for a fixed release or migration path.; Remove public access to vulnerable installations until remediated..

Prepared

Jun 28, 2026, 11:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.