MyBlog 0.9.8 and earlier allows remote attackers to bypass authentication requirements via the admin cookie parameter to certain admin files, as demonstrated by admin/settings.php.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.066
EPSS Ranking 93.0%