PT-2005-2152 · Sphpblog · Simple Php Blog

Y3Dips · Published 2005-04-14 · Updated 2016-10-18 · CVE-2005-1136

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Simple PHP Blog (sphpBlog) version 0.4.0

Description The issue allows remote attackers to obtain sensitive information by directly requesting certain files. This includes accessing the password.txt and config.txt files, potentially leading to password cracking.

Recommendations For Simple PHP Blog (sphpBlog) version 0.4.0, consider moving the password.txt and config.txt files outside of the web document root to prevent direct access. As a temporary workaround, restrict access to these files until a proper fix is applied.

Exploit

Fix

Related Identifiers

CVE-2005-1136

Affected Products

Simple Php Blog

References · 4

• 🔥 http://echo.or.id/adv/adv12-y3dips-2005.txt · Exploit
• 🔥 http://waraxe.us/ftopict-651.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-1136 · Security Note
• http://marc.info/?l=bugtraq&m=111359320312609&w=2 · Note