← Database

CVE-2008-2524

MEDIUM CVSS: 5.0 Published: 2008-06-03 Modified: 2026-06-16

Description

BlogPHP 2.0 allows remote attackers to bypass authentication, and post (1) messages or (2) comments as an arbitrary user, via a modified blogphp_username field in a cookie.

Affected Platforms

Blogphp Blogphp

Weakness Type

CWE-287

References