| Package | Affected versions | Patched versions |
|---|---|---|
| phpweblog | = 0.4.2 |
common.inc.php in phpWebLog 0.4.2 does not properly initialize the $CONF array, which inadvertently sets the password to a single character, allowing remote attackers to easily guess the SiteKey and gain administrative privileges to phpWebLog.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free