← Database

CVE-2008-4341

HIGH CVSS: 7.5 Published: 2008-09-30 Modified: 2026-06-16

Description

add.php in MyBlog 0.9.8 and earlier allows remote attackers to bypass authentication and gain administrative access by setting a cookie with admin=yes and login=admin.

Affected Platforms

Myblog Myblog

Weakness Type

CWE-264

References