CVE-2001-0088: Jason Hines Phpweblog

High severity, CVSS 7.5. EPSS: 1.8% chance of exploitation in the next 30 days.

common.inc.php in phpWebLog 0.4.2 does not properly initialize the $CONF array, which inadvertently sets the password to a single character, allowing remote attackers to easily guess the SiteKey and gain administrative privileges to phpWebLog.

Affected products

• Jason Hines Phpweblog: version 0.4.2 only

Published 2001-02-16. Last modified 2026-06-16.