alexander palmo simple php blog vulnerabilities and exploits

(subscribe to this query)

NA

Directory traversal vulnerability in languages_cgi.php in Simple PHP Blog 0.5.1 and previous versions allows remote authenticated users to include and execute arbitrary local files via a .. (dot dot) in the blog_language1 parameter.

Alexander Palmo Simple Php Blog 0.4.7 Alexander Palmo Simple Php Blog 0.4.6 Alexander Palmo Simple Php Blog 0.4.5 Alexander Palmo Simple Php Blog 0.4.0 Alexander Palmo Simple Php Blog 0.3.7c Alexander Palmo Simple Php Blog Alexander Palmo Simple Php Blog 0.4.7.1 Alexander Palmo Simple Php Blog 0.5.0.1

1 EDB exploit

NA

Directory traversal vulnerability in install05.php in Simple PHP Blog (SPB) 0.4.7.1 and previous versions allows remote malicious users to include and execute arbitrary local files via directory traversal sequences and a NUL (%00) character in the blog_language parameter, as demo...

Alexander Palmo Simple Php Blog 0.4.6 Alexander Palmo Simple Php Blog 0.4.7 Alexander Palmo Simple Php Blog 0.4.0 Alexander Palmo Simple Php Blog 0.4.5 Alexander Palmo Simple Php Blog

1 EDB exploit

NA

Multiple cross-site scripting (XSS) vulnerabilities in Simple PHP Blog (SPHPBlog) prior to 0.5.1, when register_globals is enabled, allow remote malicious users to inject arbitrary web script or HTML via certain user_colors array parameters to certain user_style.php files under t...

Alexander Palmo Simple Php Blog

NA

Incomplete blacklist vulnerability in upload_img_cgi.php in Simple PHP Blog prior to 0.5.1 allows remote malicious users to upload dangerous files and execute arbitrary code, as demonstrated by a filename ending in .php. or a .htaccess file, a different vector than CVE-2005-2733....

Alexander Palmo Simple Php Blog

NA

Multiple cross-site scripting (XSS) vulnerabilities in Simple PHP Blog 0.7.0 and possibly earlier allow remote malicious users to inject arbitrary web script or HTML via the (1) entry parameter to delete.php or (2) category parameter to index.php.

Alexander Palmo Simple Php Blog

NA

Cross-site scripting (XSS) vulnerability in search.php for Simple PHP Blog (sphpBlog) 0.4.0 allows remote malicious users to inject arbitrary web script or HTML via the q parameter.

Alexander Palmo Simple Php Blog 0.4.0

1 EDB exploit

NA

comment_delete_cgi.php in Simple PHP Blog allows remote malicious users to delete arbitrary files via the comment parameter.

Alexander Palmo Simple Php Blog 0.4.0

1 EDB exploit

NA

Multiple cross-site scripting (XSS) vulnerabilities in Simple PHP Blog 0.4.5 and previous versions allow remote malicious users to inject arbitrary web script or HTML via the (1) entry, (2) blog_subject, and (3) blog_text parameters (involving the temp_subject variable) in (a) pr...

Alexander Palmo Simple Php Blog 0.4.5

3 EDB exploits

NA

upload_img_cgi.php in Simple PHP Blog (SPHPBlog) does not properly restrict file extensions of uploaded files, which could allow remote malicious users to execute arbitrary code.

Alexander Palmo Simple Php Blog 0.4.0

2 EDB exploits

NA

Directory traversal vulnerability in Simple PHP Blog (SPHPBlog) 0.3.7c allows remote malicious users to read or create arbitrary files via a .. (dot dot) in the entry parameter.

Alexander Palmo Simple Php Blog 0.3.7c

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook