| Package | Affected versions | Patched versions |
|---|---|---|
| blogphp | = 2.0 |
BlogPHP 2.0 allows remote attackers to bypass authentication, and post (1) messages or (2) comments as an arbitrary user, via a modified blogphp_username field in a cookie.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free