CVE-2009-0383

delete.php in Max.Blog 1.0.6 does not properly restrict access, which allows remote attackers to delete arbitrary blog posts via a direct request

published February 2, 2009

CVSS
—
EPSS
3%
Percentile
87.1
In the wild
Unconfirmed
What it is

delete.php in Max.Blog 1.0.6 does not properly restrict access, which allows remote attackers to delete arbitrary blog posts via a direct request.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02958 · 87.1th percentile
Published
2009-02-02T19:00Z
EPSS history
Timeline
  • 02 FEB 19:00Z
    delete.php in Max.Blog 1.0.6 does not properly restrict access, which allows remote attackers to delete arbitrary blog posts via a direct request
    cvelistv5