2 matches found
CVE-2009-0383
CVE-2009-0383 affects Max.Blog 1.0.6; the delete.php endpoint does not properly restrict access, enabling remote attackers to delete arbitrary blog posts via a direct request. The issue is caused by improper access control on the delete operation. Impact is partial integrity/partial availability ...
6.4CVSS6.9AI score0.02958EPSS
SaveExploits1References6Affected Software1
20