PT-2008-6655 · Blog Mini · Blog Mini
CVSS v2.0
7.5
High
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Mini Blog version 1.0.1
Description
The issue concerns directory traversal vulnerabilities in the index.php file. Remote attackers can exploit this to include and execute arbitrary local files by using a .. (dot dot) in the
page and admin parameters.Recommendations
For Mini Blog version 1.0.1, consider restricting access to the index.php file until a patch is available. As a temporary workaround, avoid using the
page and admin parameters in the index.php file to minimize the risk of exploitation.Exploit
Fix
Path traversal
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Blog Mini