VYPR
← All advisories
Unrated severityNVD Advisory· Published Apr 18, 2007· Updated Jun 16, 2026

CVE-2007-2082

CVE-2007-2082

Description

Direct static code injection vulnerability in admin/settings.php in MyBlog 0.9.8 and earlier allows remote authenticated admin users to inject arbitrary PHP code via the content parameter, which can be executed by accessing index.php. NOTE: a separate vulnerability could be leveraged to make this issue exploitable by remote unauthenticated attackers.

Affected products

2
  • Myblog/Myblog2 versions
    cpe:2.3:a:myblog:myblog:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:myblog:myblog:*:*:*:*:*:*:*:*range: <=0.9.8
    • (no CPE)range: <=0.9.8

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.