CVE-2009-4909: Dootzky Oblog

Medium severity, CVSS 6.8. EPSS: 1.7% chance of exploitation in the next 30 days.

admin/index.php in oBlog allows remote attackers to conduct brute-force password guessing attacks via HTTP requests.

Affected products

• Dootzky Oblog: any version

Published 2010-06-25. Last modified 2026-06-16.