• info
• discussion
• exploit
• solution
• references

Simple PHP Blog Remote Arbitrary File Upload Vulnerability


An exploit is not required.

A proof of concept (sphpblog_file_upload.pm) as part of the Metasploit Framework project has been released.

• /data/vulnerabilities/exploits/sphpblog_file_upload.pm