Directory traversal

2009-12-2417:30:00

PRIOn knowledge base

www.prio-n.com

7.2 High

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

78.3%

JSON

Directory traversal vulnerability in languages_cgi.php in Simple PHP Blog 0.5.1 and earlier allows remote authenticated users to include and execute arbitrary local files via a … (dot dot) in the blog_language1 parameter.

CPENameOperatorVersion
simple_php_blogle0.5.1
simple_php_blogeq0.3.799
simple_php_blogeq0.4.7
simple_php_blogeq0.4.6
simple_php_blogeq0.4.7.1
simple_php_blogeq0.4.5
simple_php_blogeq0.4.0
simple_php_blogeq0.5.0.1

Name	Operator	Version
simple_php_blog	le	0.5.1
simple_php_blog	eq	0.3.799
simple_php_blog	eq	0.4.7
simple_php_blog	eq	0.4.6
simple_php_blog	eq	0.4.7.1
simple_php_blog	eq	0.4.5
simple_php_blog	eq	0.4.0
simple_php_blog	eq	0.5.0.1