Benja CMS 0.1 does not require authentication for access to admin/, which allows remote malicious users to add or delete a menu.
benjacms benja cms 0.1