Unrated severityNVD Advisory· Published Jun 25, 2010· Updated Jun 16, 2026

CVE-2009-4907

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in oBlog allow remote attackers to hijack the authentication of administrators for requests that (1) change the admin password, (2) force an admin logout, (3) change the visibility of posts, (4) remove links, and (5) change the name fields of a blog.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Dootzky/Oblog
cpe:2.3:a:dootzky:oblog:*:*:*:*:*:*:*:*
OBlog/oBlogllm-create

Patches

Vulnerability mechanics

References

packetstormsecurity.org/0912-exploits/oblog-xssxsrf.txtnvdExploit
secunia.com/advisories/37661nvdVendor Advisory
osvdb.org/60907nvd
exchange.xforce.ibmcloud.com/vulnerabilities/54714nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000