PT-2005-2153 · Sphpblog · Simple Php Blog
CVSS v2.0
5.0
Média
| Vetor | AV:N/AC:L/Au:N/C:P/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Simple PHP Blog (sphpBlog) version 0.4.0
Description
The issue allows remote attackers to obtain sensitive information via a direct request to "sb functions.php", which leaks the full pathname in a PHP error message.
Recommendations
For Simple PHP Blog (sphpBlog) version 0.4.0, consider restricting access to the "sb functions.php" file to minimize the risk of exploitation.
Exploit
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Simple Php Blog