CVE-2008-0329: Julien Plesniak Lulieblog

Medium severity, CVSS 5.0. EPSS: 2.1% chance of exploitation in the next 30 days.

LulieBlog 1.0.1 and 1.0.2 does not restrict access to (1) article_suppr.php, (2) comment_accepter.php, and (3) comment_refuser.php in Admin/, which allows remote attackers to accept comments, delete comments, and delete articles via the id parameter.

Affected products

• Julien Plesniak Lulieblog: version 1.0.1 only; version 1.0.2 only

Published 2008-01-17. Last modified 2026-06-16.