| Package | Affected versions | Patched versions |
|---|---|---|
| bilboblog | = 0.2.1 |
admin/login.php in BilboBlog 0.2.1, when register_globals is enabled, allows remote attackers to bypass authentication and obtain administrative access via a direct request that sets the login, admin_login, password, and admin_passwd parameters.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free