CVE-2009-0399
Chipmunk Blogger Script allows remote attackers to gain administrator privileges via a direct...
Chipmunk Blogger Script allows remote attackers to gain administrator privileges via a direct request to admin/reguser.php. NOTE: this is only a vulnerability when the administrator does not properly follow installation directions.
Exploit likelihood
What each source reports
NVD Score used
7.5
Chipmunk Blogger Script allows remote attackers to gain administrator privileges via a direct request to admin/reguser.php. NOTE: this is only a vulnerability when the administrator does not properly follow installation directions.
- Record
CVE-2009-0399- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-16, CWE-264
- Updated
- 2026-11-02
CVE List No score
Chipmunk Blogger Script allows remote attackers to gain administrator privileges via a direct request to admin/reguser.php. NOTE: this is only a vulnerability when the administrator does not properly follow installation directions.
- Record
CVE-2009-0399- Updated
- 2026-11-02
EUVDEUVD-2009-0403 No score
Chipmunk Blogger Script allows remote attackers to gain administrator privileges via a direct request to admin/reguser.php. NOTE: this is only a vulnerability when the administrator does not properly follow installation directions.
- Record
EUVD-2009-0403- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-c2r9-f55m-3283 No score
Chipmunk Blogger Script allows remote attackers to gain administrator privileges via a direct...
Chipmunk Blogger Script allows remote attackers to gain administrator privileges via a direct request to admin/reguser.php. NOTE: this is only a vulnerability when the administrator does not properly follow installation directions.
- Record
GHSA-c2r9-f55m-3283- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Chipmunk Blog - (Authentication Bypass) Add Admin | 2009-01-28 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2009-0399 is a high vulnerability (CVSS 7.5) in Chipmunk Scripts Blogger, published February 3, 2009. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 2.33%, the 83rd percentile. No source names a fixed version.