Unscored CVE-2005-1169 EUVD-2005-1172GHSA-mmhq-pg6g-xrxc

Mafia Blog .4 BETA does not properly protect the admin directory, which allows remote attackers to execute arbitrary PHP code by using writ…

Published Apr 18, 2005 · Updated Aug 7, 2024 · Assigned by mitre

Description

Mafia Blog .4 BETA does not properly protect the admin directory, which allows remote attackers to execute arbitrary PHP code by using writeinfo.php to inject the code into info.php.

References

http://chrisnowak.org/projects/mafia/
20050415 Mafia Blog mailing-list
13194 vdb-entry