CVE-2009-4909

Description

admin/index.php in oBlog allows remote attackers to conduct brute-force password guessing attacks via HTTP requests.

Affected Platforms

Weakness Type

CWE-287

References

• http://packetstormsecurity.org/0912-exploits/oblog-xssxsrf.txt
• https://exchange.xforce.ibmcloud.com/vulnerabilities/59824
• http://packetstormsecurity.org/0912-exploits/oblog-xssxsrf.txt
• https://exchange.xforce.ibmcloud.com/vulnerabilities/59824