CVE-2008-2524: Blogphp

Medium severity, CVSS 5.0. EPSS: 1.3% chance of exploitation in the next 30 days.

BlogPHP 2.0 allows remote attackers to bypass authentication, and post (1) messages or (2) comments as an arbitrary user, via a modified blogphp_username field in a cookie.

Affected products

• Blogphp Blogphp: version 2.0 only

Published 2008-06-03. Last modified 2026-06-16.