CVE-2007-2082

CVE-2007-2082 describes a direct static code injection vulnerability in MyBlog 0.9.8 and earlier, specifically within the admin/settings.php file. This flaw allows authenticated administrative users to inject arbitrary PHP code via the 'content' parameter, which can then be executed by accessing index.php. The vulnerability carries a CVSS score of 6.5, indicating a medium severity with a network attack vector, low attack complexity, and potential for partial confidentiality, integrity, and availability impacts. While a separate vulnerability could potentially enable unauthenticated exploitation, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.