CVE-2008-3303

admin/login.php in BilboBlog 0.2.1, when register_globals is enabled, allows remote attackers to bypass authentication and obtain administrative access via a…

published July 25, 2008

CVSS
—
EPSS
5%
Percentile
92.7
In the wild
Unconfirmed
What it is

admin/login.php in BilboBlog 0.2.1, when register_globals is enabled, allows remote attackers to bypass authentication and obtain administrative access via a direct request that sets the login, admin_login, password, and admin_passwd parameters.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05397 · 92.7th percentile
Published
2008-07-25T13:18Z
EPSS history
Timeline
  • 25 JUL 13:18Z
    admin/login.php in BilboBlog 0.2.1, when register_globals is enabled, allows remote attackers to bypass authentication and obtain administrative access via a…
    cvelistv5