Vulnerabilities > CVE-2001-0088 - Unspecified vulnerability in Jason Hines PHPweblog 0.4.2

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
jason-hines
NVD
Published: 2001-02-16
Updated: 2024-11-20

Summary

common.inc.php in phpWebLog 0.4.2 does not properly initialize the $CONF array, which inadvertently sets the password to a single character, allowing remote attackers to easily guess the SiteKey and gain administrative privileges to phpWebLog.

Vulnerable Configurations

Part Description Count
Application
Jason_Hines
1

References