Auth bypass in Will Kraft Ez-Blog

CVE-2009-4801

EZ-Blog Beta 1 does not require authentication, which allows remote attackers to create or delete arbitrary posts via requests to PHP scripts.

Vulnerability class: Broken Authentication

EPSS: 0.023 (81.1th percentile) — read the EPSS interpretation.

Affected products

Will_kraft Ez-blog
N/a — versions n/a

Weakness classification (CWE)

CWE-287 — Improper Authentication

References

cve@mitre.org (exploit, x_refsource_EXPLOIT-DB)
cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)