PT-2007-3423 · Myblog · Myblog

Published 2007-04-18 · Updated 2018-10-16 · CVE-2007-2081

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions MyBlog versions 0.9.8 and earlier

Description The issue allows remote attackers to bypass authentication requirements. This can be achieved via the admin cookie parameter to certain admin files, such as "admin/settings.php".

Recommendations For MyBlog versions 0.9.8 and earlier, consider restricting access to admin files until a patch is available. As a temporary workaround, avoid using the admin cookie parameter in sensitive areas of the application.

Exploit

Fix

Related Identifiers

CVE-2007-2081

Affected Products

Myblog

References · 7

• 🔥 http://securityfocus.com/bid/23521 · Exploit
• 🔥 https://exploit-db.com/exploits/29864 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-2081 · Security Note
• http://securityreason.com/securityalert/2581 · Note
• http://securityfocus.com/archive/1/465873/100/0/threaded · Note
• http://osvdb.org/41593 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34025 · Note