Unscored CVE-2006-7014 EUVD-2006-6996GHSA-227x-w5qv-2294

admin.php in BloggIT 1.01 and earlier does not properly establish a user session, which allows remote attackers to gain privileges via a di…

Published Feb 15, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

admin.php in BloggIT 1.01 and earlier does not properly establish a user session, which allows remote attackers to gain privileges via a direct request.

References

20060606 BloggIT <= 1.01 (admin.php) Arbitrary code execution mailing-list
bloggit-admin-code-execution(27011) vdb-entry
2255 third-party-advisory
1016246 vdb-entry
ADV-2006-2210 vdb-entry
20499 third-party-advisory