CVE-2008-6473: Blogator-Script

Medium severity, CVSS 6.4. EPSS: 2.3% chance of exploitation in the next 30 days.

_blogadata/include/init_pass2.php in Blogator-script 0.95 allows remote attackers to change the password for arbitrary users via a modified "a" parameter with a "%" wildcard symbol in the b parameter.

Affected products

• Blogator-Script Blogator-Script: version 0.95 only

Published 2009-03-16. Last modified 2026-06-16.