CVE-2009-4801 - CVE House
Back to Database
Status published High CVE-2009-4801

EZ-Blog Beta 1 does not require authentication, which allows remote...

Vulnerability Description

EZ-Blog Beta 1 does not require authentication, which allows remote attackers to create or delete arbitrary posts via requests to PHP scripts.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2009-4801

Credits & Attribution

No credits recorded in the NVD database.

References

More from will kraft

View All →
CVE-2009-4805
Multiple SQL injection vulnerabilities in EZ-Blog Beta 1, when magic_quotes_gpc...
Medium 6.8
CVE-2009-1626
SQL injection vulnerability in public/specific.php in EZ-Blog before Beta 2...
High 7.5

Affected Vendor

Affected Software

ez-blog
Vulnerable Versions:
Unknown

Timeline

Official Publish: April 23rd, 2010
Last Modified: August 7th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.