Lucene search
K

CVE-2005-2733

🗓️ 29 Aug 2005 04:00:00Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov👁 66 Views🌐 WEB

Simple PHP Blog upload_img_cgi.php remote code executio

Related
Detection
Refs
Paths
ReporterTitlePublishedViews
Family
GithubExploit
Systems-and-Cyber-Security-Coursework
11 Jun 202617:43
githubexploit
Tenable Nessus
Simple PHP Blog (SPHPBlog) <= 0.4.0 Multiple Vulnerabilities
26 Aug 200500:00
nessus
Tenable Nessus
Simple PHP Blog <= 0.4.0 Multiple Vulnerabilities
27 Aug 200500:00
nessus
Circl
CVE-2005-2733
25 Jul 201000:00
circl
Cvelist
CVE-2005-2733
29 Aug 200504:00
cvelist
Exploit DB
Simple PHP Blog 0.4.0 - Remote Command Execution (Metasploit)
25 Jul 201000:00
exploitdb
Metasploit
Simple PHP Blog Remote Command Execution
16 Nov 200918:51
metasploit
NVD
CVE-2005-2733
30 Aug 200511:45
nvd
Packet Storm
Simple PHP Blog 0.4.0 Command Execution
30 Oct 200900:00
packetstorm
Prion
Design/Logic Flaw
24 Sep 200723:17
prion
Rows per page
NVD
ParameterPositionPathDescriptionCWE
userfilerequest body/upload_img_cgi.phpImage upload endpoint vulnerable to arbitrary file upload due to lack of validation
userrequest body/install03_cgi.phpEndpoint used to create a temporary account for exploitation via crafted credentials
passrequest body/install03_cgi.phpEndpoint used to create a temporary account for exploitation via crafted credentials
userrequest body/login_cgi.phpLogin endpoint used to obtain authenticated session for upload
passrequest body/login_cgi.phpLogin endpoint used to obtain authenticated session for upload
yquery param/comment_delete_cgi.phpComment deletion endpoint exploited to remove files via crafted query parameters
mquery param/comment_delete_cgi.phpComment deletion endpoint exploited to remove files via crafted query parameters
commentquery param/comment_delete_cgi.phpComment deletion endpoint exploited to remove files via crafted query parameters

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

16 Jun 2026 22:15Current
7.4High risk
Vulners AI Score7.4
CVSS 27.5
EPSS0.50888
66