Mura CMS Default Administrator Credentials

high Nessus Plugin ID 49698

Synopsis

A web application is protected using default administrative credentials.

Description

The remote Mura CMS install uses a default set of credentials ('admin' / 'admin') to control access to the Mura Admin.

With this information, an attacker can gain administrative access to the application.

Solution

Log into the Mura Admin, select 'Edit Profile', and change the password.

Plugin Details

Severity: High

ID: 49698

File Name: mura_cms_default_creds.nasl

Version: 1.11

Type: remote

Family: CGI abuses

Published: 9/30/2010

Updated: 6/1/2022

Configuration: Enable thorough checks

Supported Sensors: Nessus

Vulnerability Information

Required KB Items: www/mura_cms

Excluded KB Items: global_settings/supplied_logins_only