medium5.1Public exploit code
CVE-2008-3080
Cross-site request forgery (CSRF) vulnerability in admin.php in myWebland myBloggie 2.1.6 allows remote attackers to perform edit actions as administrators.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- MyBloggie 2.1.6 - Multiple SQL Injections2008-06-30 · webapps · php · Verified
Impact
Cross-site request forgery (CSRF) vulnerability in admin.php in myWebland myBloggie 2.1.6 allows remote attackers to perform edit actions as administrators. NOTE: this can be leveraged to execute SQL commands by also exploiting CVE-2007-1899.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mywebland | Mybloggie | Version 2.1.6 |