alexander palmo simple php blog 0.4.0 vulnerabilities and exploits

(subscribe to this query)

Directory traversal vulnerability in languages_cgi.php in Simple PHP Blog 0.5.1 and previous versions allows remote authenticated users to include and execute arbitrary local files via a .. (dot dot) in the blog_language1 parameter.

Alexander Palmo Simple Php Blog 0.4.7 Alexander Palmo Simple Php Blog 0.4.6 Alexander Palmo Simple Php Blog 0.4.5 Alexander Palmo Simple Php Blog 0.4.0 Alexander Palmo Simple Php Blog 0.3.7c Alexander Palmo Simple Php Blog Alexander Palmo Simple Php Blog 0.4.7.1 Alexander Palmo Simple Php Blog 0.5.0.1

1 EDB exploit

Directory traversal vulnerability in install05.php in Simple PHP Blog (SPB) 0.4.7.1 and previous versions allows remote malicious users to include and execute arbitrary local files via directory traversal sequences and a NUL (%00) character in the blog_language parameter, as demo...

Alexander Palmo Simple Php Blog 0.4.6 Alexander Palmo Simple Php Blog 0.4.7 Alexander Palmo Simple Php Blog 0.4.0 Alexander Palmo Simple Php Blog 0.4.5 Alexander Palmo Simple Php Blog

1 EDB exploit

Cross-site scripting (XSS) vulnerability in search.php for Simple PHP Blog (sphpBlog) 0.4.0 allows remote malicious users to inject arbitrary web script or HTML via the q parameter.

Alexander Palmo Simple Php Blog 0.4.0

1 EDB exploit

comment_delete_cgi.php in Simple PHP Blog allows remote malicious users to delete arbitrary files via the comment parameter.

Alexander Palmo Simple Php Blog 0.4.0

1 EDB exploit

upload_img_cgi.php in Simple PHP Blog (SPHPBlog) does not properly restrict file extensions of uploaded files, which could allow remote malicious users to execute arbitrary code.

Alexander Palmo Simple Php Blog 0.4.0

2 EDB exploits

SimplePHPBlog 0.4.0 stores password hashes in config/password.txt with insufficient access control, which allows remote malicious users to obtain passwords via a brute force attack.

Alexander Palmo Simple Php Blog 0.4.0

1 EDB exploit

Simple PHP Blog (sphpBlog) 0.4.0 allows remote malicious users to obtain sensitive information via a direct request to sb_functions.php, which leaks the full pathname in a PHP error message.

Alexander Palmo Simple Php Blog 0.4.0

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook