CVE-2008-3303

CVE-2008-3303 affects BilboBlog 0.2.1 where enabling PHP register_globals allows a remote attacker to bypass authentication and obtain administrative access by issuing a direct request that sets login, admin_login, password, and admin_passwd. The issue is a direct-authentication bypass vulnerabil...