CVE-2009-4801 EZ-Blog Beta 1 does not require authentication, which allows remote attackers to create or delete arbitrary posts via requests to PHP scripts.
HighCVSS 7.5
EPSS 2.3%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
EZ-Blog Beta 1 does not require authentication, which allows remote attackers to create or delete arbitrary posts via requests to PHP scripts.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| will kraft ez-blog | All versions | No fix listed |
References
- 8128 exploit
- 20090301 EZ-Blog Beta 1 Multiple SQL Injection mailing-list