Simple PHP Blog Remote Arbitrary File Upload Vulnerability

Bugtraq ID:	14667
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Aug 26 2005 12:00AM
Updated:	May 16 2006 10:14PM
Credit:	Discovery is credited to ReZEN and 0xception.
Vulnerable:	Alexander Palmo Simple PHP Blog 0.4
Not Vulnerable:

Simple PHP Blog Remote Arbitrary File Upload Vulnerability

Simple PHP Blog is prone to a remote arbitrary file-upload vulnerability.

This issue may allow remote attackers to upload arbitrary files, including malicious scripts, and possibly to execute a script on the affected server.

Simple PHP Blog 0.4.0 is affected by this issue. Other versions may be vulnerable as well.

Simple PHP Blog Remote Arbitrary File Upload Vulnerability


An exploit is not required.

A proof of concept (sphpblog_file_upload.pm) as part of the Metasploit Framework project has been released.

• /data/vulnerabilities/exploits/sphpblog_file_upload.pm

Simple PHP Blog Remote Arbitrary File Upload Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Simple PHP Blog Remote Arbitrary File Upload Vulnerability

References:

• Simple PHP Blog Home Page (Alexander Palmo)