Benja CMS 0.1 does not require authentication for access to admin/, which allows remote attackers to add or delete a menu.Referenceshttp://www.securityfocus.com/archive/1/493568/100/0/threadedhttp://securityreason.com/securityalert/3958http://secunia.com/advisories/30834http://www.securityfocus.com/bid/29884
