CVE-2007-2081

MyBlog <0.9.8 - Auth Bypass

Title source: llm

Description

MyBlog 0.9.8 and earlier allows remote attackers to bypass authentication requirements via the admin cookie parameter to certain admin files, as demonstrated by admin/settings.php.

Exploits (1)

exploitdb WORKING POC VERIFIED

by BlackHawk · phpwebappsphp

https://www.exploit-db.com/exploits/29864

View Code ZIP pw:eip

References (5)

[Exploit] http://www.securityfocus.com/bid/23521

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/34025

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/465873/100/0/threaded

[Third Party Advisory, VDB Entry] http://osvdb.org/41593

[Third Party Advisory] http://securityreason.com/securityalert/2581

Scores

EPSS 0.0744

EPSS Percentile 91.8%

Details

Status published

Products (1)

myblog/myblog < 0.9.8

Published Apr 18, 2007

Tracked Since Feb 18, 2026