CVE-2008-1507

CVE-2008-1507 describes a critical vulnerability in PEEL CMS, specifically versions 3.x and earlier. It involves the presence of hardcoded default administrative credentials for the '[email protected]' (password 'admin') and '[email protected]' (password 'cinema') accounts. This flaw allows unauthenticated remote attackers to easily gain full administrative access to affected PEEL CMS installations. The vulnerability carries a CVSS score of 7.5, indicating high severity due to its network-based attack vector, low attack complexity, and complete compromise of confidentiality, integrity, and availability. Its FAUCET Risk Score of 90/100 further emphasizes the significant risk. While not listed on the CISA KEV catalog or Hot List, exploit code for administrative hash extraction and arbitrary file upload is publicly available on ExploitDB. Despite this, there is no evidence of active exploitation, and community discussion and media coverage are minimal.