CVE-2005-2733
Simple PHP Blog - RCE
Title source: llmDescription
upload_img_cgi.php in Simple PHP Blog (SPHPBlog) does not properly restrict file extensions of uploaded files, which could allow remote attackers to execute arbitrary code.
Exploits (3)
exploitdb
WORKING POC
VERIFIED
by Metasploit · rubywebappsphp
https://www.exploit-db.com/exploits/16883
metasploit
WORKING POC
EXCELLENT
rubypocphp
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/sphpblog_file_upload.rb
References (4)
Scores
EPSS
0.7994
EPSS Percentile
99.1%
Details
Status
published
Products (1)
alexander_palmo/simple_php_blog
0.4.0
Published
Aug 30, 2005
Tracked Since
Feb 18, 2026