CVE-2007-2081: Myblog

High severity, CVSS 7.5. EPSS: 6.6% chance of exploitation in the next 30 days.

MyBlog 0.9.8 and earlier allows remote attackers to bypass authentication requirements via the admin cookie parameter to certain admin files, as demonstrated by admin/settings.php.

Affected products

• Myblog Myblog: up to and including 0.9.8

Published 2007-04-18. Last modified 2026-06-16.