high7.5Public exploit code
CVE-2009-0399
Chipmunk Blogger Script allows remote attackers to gain administrator privileges via a direct request to admin/reguser.php.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Chipmunk Blog - (Authentication Bypass) Add Admin2009-01-28 · webapps · php · Verified
Impact
Chipmunk Blogger Script allows remote attackers to gain administrator privileges via a direct request to admin/reguser.php. NOTE: this is only a vulnerability when the administrator does not properly follow installation directions.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Chipmunk Scripts | Chipmunk Blogger | All versions |