CVE-2008-2524: Improper Authentication

BlogPHP 2.0 allows remote attackers to bypass authentication, and post 1 messages or 2 comments as an arbitrary user, via a modified blogphpusername field in a cookie...

CVE-2006-0372: Undefined Security Weakness

Multiple SQL injection vulnerabilities in config.php in Insane Visions BlogPHP, possibly 1.0, allow remote attackers to execute arbitrary SQL commands via the 1 blogphpusername or 2 blogphppassword parameter in a cookie...