CVE-2005-1136

Published: Apr 14, 2005Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Simple PHP Blog (sphpBlog) 0.4.0 stores the (1) password.txt and (2) config.txt files under the web document root, which allows remote attackers to obtain sensitive information and crack passwords via a direct request to these files.

Affected (1)

Products: Sphpblog: Sphpblog

Sphpblog

1 product

Sphpblog

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Sphpblog Sphpblog	Version 0.4_.0

References (6)

http://echo.or.id/adv/adv12-y3dips-2005.txt

Source: cve@mitre.org

ExploitVendor Advisory

http://marc.info/?l=bugtraq&m=111359320312609&w=2

Source: cve@mitre.org

http://www.waraxe.us/ftopict-651.html

Source: cve@mitre.org

ExploitVendor Advisory

http://echo.or.id/adv/adv12-y3dips-2005.txt

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitVendor Advisory

http://marc.info/?l=bugtraq&m=111359320312609&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.waraxe.us/ftopict-651.html

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitVendor Advisory

Timeline

No history available yet.