CVE-2005-2733

Simple PHP Blog - RCE

Title source: llm

Description

upload_img_cgi.php in Simple PHP Blog (SPHPBlog) does not properly restrict file extensions of uploaded files, which could allow remote attackers to execute arbitrary code.

Exploits (3)

exploitdb WORKING POC VERIFIED
by Metasploit · rubywebappsphp
https://www.exploit-db.com/exploits/16883
exploitdb WORKING POC
perlwebappsphp
https://www.exploit-db.com/exploits/1191
metasploit WORKING POC EXCELLENT
rubypocphp
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/sphpblog_file_upload.rb

Scores

EPSS 0.7994
EPSS Percentile 99.1%

Details

Status published
Products (1)
alexander_palmo/simple_php_blog 0.4.0
Published Aug 30, 2005
Tracked Since Feb 18, 2026