comment_delete_cgi.php in Simple PHP Blog allows remote attackers to delete arbitrary files via the comment parameter.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Simple_php_blog | Alexander_palmo | 0.4.0 (including) | 0.4.0 (including) |
References
- http://marc.info/?l=bugtraq\u0026m=112534658510762\u0026w=2
- http://secunia.com/advisories/16616/
- http://www.ftusecurity.com/pub/sphpblog_vulns
- http://www.securityfocus.com/bid/14681
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22096
- http://marc.info/?l=bugtraq\u0026m=112534658510762\u0026w=2
- http://secunia.com/advisories/16616/
- http://www.ftusecurity.com/pub/sphpblog_vulns
- http://www.securityfocus.com/bid/14681
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22096