Exploitation Summary
EIP tracks 1 public exploit for CVE-2005-2192.
AI-analyzed exploit summary This Perl script exploits multiple vulnerabilities in SimplePHPBlog v0.4.0, including arbitrary file upload, password hash retrieval, and file deletion. It demonstrates a full exploit chain to achieve remote command execution via uploaded PHP scripts.
Description
SimplePHPBlog 0.4.0 stores password hashes in config/password.txt with insufficient access control, which allows remote attackers to obtain passwords via a brute force attack.
Exploits (1)
This Perl script exploits multiple vulnerabilities in SimplePHPBlog v0.4.0, including arbitrary file upload, password hash retrieval, and file deletion. It demonstrates a full exploit chain to achieve remote command execution via uploaded PHP scripts.