CVE-2001-0088

The CVE-2001-0088 entry concerns phpWebLog 0.4.2 where the common.inc.php initialization fails to set the $CONF array correctly, causing the password to be reduced to a single character. This weakens the SiteKey and enables remote attackers to potentially gain administrative privileges. Documenta...

Дырка в phpWebLog

Из-за некорректной инициализации переменных пользователь может получить доступ к администрированию...

Bypassing admin authentication in phpWebLog

Note: Although this software is still in beta stage, there are many websites using it, so i think it's a relevant issue. Author: Jason Hines Homepage: http://www.phpweblog.org | http://sourceforge.net/projects/phpweblog/ Version: 0.4.2 others? Problem: in common.inc.php, $CONF is not properly...