What’s Vulnerable › Vulnerabilities

CVE-2001-0088

• Severity: high (CVSS 7.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.8% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2001-02-16 · updated 2026-06-16

Description

common.inc.php in phpWebLog 0.4.2 does not properly initialize the $CONF array, which inadvertently sets the password to a single character, allowing remote attackers to easily guess the SiteKey and gain administrative privileges to phpWebLog.

Affected products

• Jason Hines Phpweblog: 0.4.2

References

• http://archives.neohapsis.com/archives/bugtraq/2000-12/0025.html
• http://www.securityfocus.com/bid/2047
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5625
• http://archives.neohapsis.com/archives/bugtraq/2000-12/0025.html
• http://www.securityfocus.com/bid/2047
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5625

Get alerted when CVE-2001-0088 or the next vulnerability affects your stack