Simple PHP Blog Comment_Delete_CGI.PHP Directory Traversal Vulnerability

Bugtraq ID:	14681
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Aug 29 2005 12:00AM
Updated:	Aug 29 2005 12:00AM
Credit:	'ken'@FTU is credited with the discovery of this vulnerability.
Vulnerable:	Alexander Palmo Simple PHP Blog 0.4
Not Vulnerable:

Simple PHP Blog Comment_Delete_CGI.PHP Directory Traversal Vulnerability

Simple PHP Blog is prone to a directory traversal vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker can exploit this issue to delete arbitrary files on the affected system in the context of the Web server process.

Simple PHP Blog Comment_Delete_CGI.PHP Directory Traversal Vulnerability

No exploit is required.

The following exploit is available:

• /data/vulnerabilities/exploits/sphpblog_vulns.pl

Simple PHP Blog Comment_Delete_CGI.PHP Directory Traversal Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Simple PHP Blog Comment_Delete_CGI.PHP Directory Traversal Vulnerability

References:

• Simple PHP Blog Home Page (Alexander Palmo)
  
• SimplePHPBlog Arbitrary File Deletion and Sample Exploit ("'ken'@FTU" )