CVE-2005-1136

S

imple PHP Blog (sphpBlog) 0.4.0 stores the (1) password.txt and (2) config.txt files under the web document root, which allows remote attackers to obtain sensitive information and crack passwords via a direct request to these files.

Configurations

Configuration 1 (hide)

cpe:2.3:a:sphpblog:sphpblog:0.4_.0:*:*:*:*:*:*:*

History

20 Nov 2024, 23:56

Type Values Removed Values Added
References () http://echo.or.id/adv/adv12-y3dips-2005.txt - Exploit, Vendor Advisory () http://echo.or.id/adv/adv12-y3dips-2005.txt - Exploit, Vendor Advisory
References () http://marc.info/?l=bugtraq&m=111359320312609&w=2 - () http://marc.info/?l=bugtraq&m=111359320312609&w=2 -
References () http://www.waraxe.us/ftopict-651.html - Exploit, Vendor Advisory () http://www.waraxe.us/ftopict-651.html - Exploit, Vendor Advisory

Information

Published : 2005-04-14 04:00

Updated : 2025-04-03 01:03


NVD link : CVE-2005-1136

Mitre link : CVE-2005-1136

CVE.ORG link : CVE-2005-1136


JSON object : View

Products Affected