Skip to content
OpenAdvisories

Vendor

Sflog!

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • High 8.7
    CVE-2012-10042 Public exploit

    Sflog! CMS 1.0 Arbitrary File Upload RCE

    Sflog! CMS 1.0 contains an authenticated arbitrary file upload vulnerability in the blog management interface. The application ships with default credentials (admin:secret) and allows authenticated users to upload files via manage.php. The upload mechanism fa…