PT-2005-2152 · Sphpblog · Simple Php Blog

Y3Dips · Publicado 2005-04-14 · Atualizado 2016-10-18 · CVE-2005-1136

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Simple PHP Blog (sphpBlog) version 0.4.0

Description The issue allows remote attackers to obtain sensitive information by directly requesting certain files. This includes accessing the password.txt and config.txt files, potentially leading to password cracking.

Recommendations For Simple PHP Blog (sphpBlog) version 0.4.0, consider moving the password.txt and config.txt files outside of the web document root to prevent direct access. As a temporary workaround, restrict access to these files until a proper fix is applied.

Exploit

Correção

Identificadores relacionados

CVE-2005-1136

Produtos afetados

Simple Php Blog

Referências · 4

• 🔥 http://echo.or.id/adv/adv12-y3dips-2005.txt · Exploit
• 🔥 http://waraxe.us/ftopict-651.html · Exploit
• http://marc.info/?l=bugtraq&m=111359320312609&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-1136 · Nota de Segurança