Description
Directory traversal vulnerability in Simple PHP Blog (SPHPBlog) 0.3.7c allows remote attackers to read or create arbitrary files via a .. (dot dot) in the entry parameter.
References
- 20050107 Simple PHP Blog directory traversal vulnerability mailing-list
- 20050107 Simple PHP Blog directory traversal vulnerability mailing-list
- sphp-dotdot-directory-traversal(18802) vdb-entry
- 12193 vdb-entry