Vulnerability Details CVE-2005-2733
upload_img_cgi.php in Simple PHP Blog (SPHPBlog) does not properly restrict file extensions of uploaded files, which could allow remote attackers to execute arbitrary code.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.806
EPSS Ranking 99.1%
CVSS Severity
CVSS v2 Score 7.5
References
- http://marc.info/?l=bugtraq&m=112511159821143&w=2
- http://secunia.com/advisories/16598/
- http://www.securityfocus.com/bid/14667
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22012
- http://marc.info/?l=bugtraq&m=112511159821143&w=2
- http://secunia.com/advisories/16598/
- http://www.securityfocus.com/bid/14667
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22012
Products affected by CVE-2005-2733
-
cpe:2.3:a:alexander_palmo:simple_php_blog:0.4.0