| Package | Affected versions | Patched versions |
|---|---|---|
| simple php blog | = 0.3.7c= 0.4.0= 0.4.5= 0.4.6= 0.4.7= 0.4.7.1= 0.5.0.1≤ 0.5.1 |
Directory traversal vulnerability in languages_cgi.php in Simple PHP Blog 0.5.1 and earlier allows remote authenticated users to include and execute arbitrary local files via a .. (dot dot) in the blog_language1 parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free