Authentication flaw

2008-06-0315:32:00

PRIOn knowledge base

www.prio-n.com

7.3 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

70.7%

JSON

BlogPHP 2.0 allows remote attackers to bypass authentication, and post (1) messages or (2) comments as an arbitrary user, via a modified blogphp_username field in a cookie.

CPENameOperatorVersion
blogphpeq2.0

CPE	Name	Operator	Version
	blogphp	eq	2.0

References

secunia.com/advisories/30165

www.securityfocus.com/bid/29133

exchange.xforce.ibmcloud.com/vulnerabilities/42372

www.davidsopas.com/soapbox/blogphp.txt