CVE-2009-4421

CVE-2009-4421 affects Simple PHP Blog

Simple PHP Blog v0.5.1 Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ========================================================= Simple PHP Blog v0.5.1 Local File Inclusion Vulnerability ========================================================= Simple PHP Blog is prone to a local file-include vulnerability...

Simple PHP Blog 0.5.1 - Local File Inclusion

Simple PHP Blog 0.5.1 - Local File Inclusion Simple PHP Blog is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information or to execute arbitrary local scripts in th...

Simple PHP Blog <= 0.5.1 Local File Include vulnerability

No description provided by source. ============================================= INTERNET SECURITY AUDITORS ALERT 2009-005 - Original release date: March 2nd, 2009 - Last revised: December 18th, 2009 - Discovered by: Juan Galiana Lara - Severity: 6.8/10 CVSS scored...

Simple PHP Blog 0.5.1 - Local File Inclusion

Simple PHP Blog is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information or to execute arbitrary local scripts in the context of the webserver process. This may...

Simple PHP Blog 0.5.1 Local File Inclusion

============================================= INTERNET SECURITY AUDITORS ALERT 2009-005 - Original release date: March 2nd, 2009 - Last revised: December 18th, 2009 - Discovered by: Juan Galiana Lara - Severity: 6.8/10 CVSS scored ============================================= I. VULNERABILITY...

Simple PHP Blog 0.4.0 Command Execution

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Simple PHP...

Simple PHP Blog Detection

The remote host is running Simple PHP Blog, an open source blog application that uses flat text files. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid34109; scriptversion"1.13"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/06/01";...

Simple PHP Blog config/users.php Arbitrary User Password Hash Disclosure

The version of Simple PHP Blog installed on the remote host allows an unauthenticated, remote attacker to retrieve information about non-admin users defined to the application, including their user names and password hashes, which could in turn be used to gain access to the application. While the...

Simple PHP Blog (SPHPBlog) <= 0.5.1 Code Execution Exploit

No description provided by source. ? / sIMPLE php bLOG 0.5.0 eXPLOIT bY mAXzA 2008 / function curl$url,$postvar global $cook; $ch = curlinit $url ; curlsetopt $ch, CURLOPTRETURNTRANSFER, 1; curlsetopt $ch, CURLOPTHEADER, 1; curlsetopt $ch, CURLOPTREFERER,"$url"; if strlen$postvar3 $postvar="123";...

Simple PHP Blog (SPHPBlog) 0.5.1 - Code Execution

Simple PHP Blog SPHPBlog 0.5.1 - Code Execution 3 curlsetopt $ch, CURLOPTCOOKIE, "$cook"; $res = curlexec $ch;$err=curlerror $ch ;if $err print "$err"; curlclose$ch; return $res; function error$msg print "$msg\nNot Exploitable";exit; extract$POST;extract$GET; print "URL:"; if strlen$eval3...

Maran PHP Blog Xss By Khashayar Fereidani

---------------------------------------------------------------- Script : Maran PHP Blog Type : XSS Pasive Method : GET Alert : Medium ---------------------------------------------------------------- Discovered by : Khashayar Fereidani a.k.a. Dr.Crash My Offical Website : HTTP://FEREIDANI.IR...

Maran PHP Blog - 'comments.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/30309/info Maran PHP Blog is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the contex...

Simple PHP Blog (sphpblog) <= 0.5.1 Multiple Vulnerabilities

No description provided by source. Title: Simple PHP Blog sphpblog = 0.5.1 Multiple Vulnerabilities Vendor: http://sourceforge.net/projects/sphpblog/ Advisory: http://acid-root.new.fr/?0:15 Author: DarkFig gmdarkfig at gmail dot com Released on: 2007/10/21 Changelog: ---------- L M H T Summary: I...

Simple PHP Blog <= 0.5.1 Multiple Vulnerabilities

Binary data 4259.prm...

Simple PHP Blog (sphpblog) <= 0.5.1 Multiple Vulnerabilities

Exploit for unknown platform in category web applications ============================================================ Simple PHP Blog sphpblog = 0.5.1 Multiple Vulnerabilities ============================================================ Title: Simple PHP Blog sphpblog = 0.5.1 Multiple...

Simple PHP Blog (sPHPblog) 0.5.1 - Multiple Vulnerabilities

Simple PHP Blog sPHPblog 0.5.1 - Multiple Vulnerabilities Title: Simple PHP Blog sphpblog Released on: 2007/10/21 Changelog: ---------- L M H T Summary: Ip Spoofing X X Cross Site Scripting X X Session Fixation X X mail CRLF Injection X Local File Inclusion +CSRF X X File Deletion +CSRF X X File...

sphpblog051-multi.txt

Title: Simple PHP Blog sphpblog Released on: 2007/10/21 Changelog: ---------- L M H T Summary: Ip Spoofing X X Cross Site Scripting X X Session Fixation X X mail CRLF Injection X Local File Inclusion +CSRF X X File Deletion +CSRF X X File Upload Vulnerability X X Code Execution +CSRF X X Legend: ...

Simple PHP Blog (sPHPblog) 0.5.1 - Multiple Vulnerabilities

Title: Simple PHP Blog sphpblog Released on: 2007/10/21 Changelog: ---------- L M H T Summary: Ip Spoofing X X Cross Site Scripting X X Session Fixation X X mail CRLF Injection X Local File Inclusion +CSRF X X File Deletion +CSRF X X File Upload Vulnerability X X Code Execution +CSRF X X Legend: ...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in Simple PHP Blog SPHPBlog 0.4.9 allow remote attackers to perform delete actions as administrators via 1 the blockid parameter to addblock.php or 2 the linkid parameter to addlink.php...