CVE-2006-7014

admin.php in BloggIT 1.01 and earlier does not properly establish a user session, which allows...

7.5 High

admin.php in BloggIT 1.01 and earlier does not properly establish a user session, which allows remote attackers to gain privileges via a direct request.

Exploit likelihood

1.80%Up 0.5 points since Feb 4, 2022

What each source reports

NVD Score used 7.5

admin.php in BloggIT 1.01 and earlier does not properly establish a user session, which allows remote attackers to gain privileges via a direct request.

Record: CVE-2006-7014
CVSS 2.0: 7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Updated: 2026-11-02

CVE List No score

admin.php in BloggIT 1.01 and earlier does not properly establish a user session, which allows remote attackers to gain privileges via a direct request.

Record: CVE-2006-7014
Updated: 2026-11-02

EUVDEUVD-2006-6996 No score

admin.php in BloggIT 1.01 and earlier does not properly establish a user session, which allows remote attackers to gain privileges via a direct request.

Record: EUVD-2006-6996
Updated: 2026-11-03

GitHub AdvisoriesGHSA-227x-w5qv-2294 No score

admin.php in BloggIT 1.01 and earlier does not properly establish a user session, which allows...

admin.php in BloggIT 1.01 and earlier does not properly establish a user session, which allows remote attackers to gain privileges via a direct request.

Record: GHSA-227x-w5qv-2294
Updated: 2026-11-02

Affected products

bloggit

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2006-7014 is a high vulnerability (CVSS 7.5) in Bloggit, published February 15, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.80%, the 78th percentile. No source names a fixed version.

Exploit likelihood

What each source reports

Affected products

History

In short

References