Unscored CVE-2005-1136 EUVD-2005-1139GHSA-p35h-cp5r-m46j

Simple PHP Blog (sphpBlog) 0.4.0 stores the (1) password.txt and (2) config.txt files under the web document root, which allows remote atta…

Published Apr 16, 2005 · Updated Aug 7, 2024 · Assigned by mitre

Description

Simple PHP Blog (sphpBlog) 0.4.0 stores the (1) password.txt and (2) config.txt files under the web document root, which allows remote attackers to obtain sensitive information and crack passwords via a direct request to these files.

References

http://echo.or.id/adv/adv12-y3dips-2005.txt
20050415 [ECHO_ADV_12$2005] Vulnerabilities in sphpblog mailing-list
http://www.waraxe.us/ftopict-651.html