CVE-2009-2382

CRITICAL 9.8CVE-2009-2382 · Published 08/07/2009 · updated 16/06/2026

In short

CVE-2009-2382 is a CRITICAL (CVSS 9.8) vulnerability affecting phpmyblockchecker (jay-jayx0r).
Chance of exploitation in the next 30 days (EPSS): 6.2%, higher than 93.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
phpmyblockchecker jay-jayx0r	`= 1.0.0055`	No fix yet

Description

admin.php in phpMyBlockchecker 1.0.0055 allows remote attackers to bypass authentication and gain administrative access by setting the PHPMYBCAdmin cookie to LOGGEDIN.

References

osvdb.org/55505 · Broken Link
secunia.com/advisories/35660 · Broken Link
exploit-db.com/exploits/9053 · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/51445 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free