CVE-2005-2733
Simple PHP Blog - Remote Code Execution via Unrestricted File Upload
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2005-2733.
PoCs published by Metasploit, including Metasploit module exploits/unix/webapp/sphpblog_file_upload.
AI-analyzed exploit summary This Metasploit module exploits CVE-2005-2733 in Simple PHP Blog <= 0.4.0 by combining three vulnerabilities: unauthenticated access to password hashes, arbitrary file upload via image upload functionality, and arbitrary file deletion via comment functionality. It uploads a PHP payload to achieve remote command execution.
Description
upload_img_cgi.php in Simple PHP Blog (SPHPBlog) does not properly restrict file extensions of uploaded files, which could allow remote attackers to execute arbitrary code.
Exploits (3)
This Metasploit module exploits CVE-2005-2733 in Simple PHP Blog <= 0.4.0 by combining three vulnerabilities: unauthenticated access to password hashes, arbitrary file upload via image upload functionality, and arbitrary file deletion via comment functionality. It uploads a PHP payload to achieve remote command execution.
This Perl script exploits multiple vulnerabilities in SimplePHPBlog v0.4.0, including arbitrary file upload, password hash retrieval, and file deletion. It demonstrates a full exploit chain to achieve remote command execution via uploaded PHP files.
This Metasploit module exploits three vulnerabilities in Simple PHP Blog <= 0.4.0: unauthenticated access to password hashes, arbitrary file upload via image upload functionality, and arbitrary file deletion via comment functionality. It chains these to achieve remote command execution by uploading a malicious PHP script.